Update translations from Transifex

17 files changed, 3597 insertions, 637 deletions

diff --git a/install/po/bn_IN.po b/install/po/bn_IN.po
index b53b05553..ed70c86bc 100644
--- a/install/po/bn_IN.po
+++ b/install/po/bn_IN.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# jdennis <jdennis@redhat.com>, 2011.
-# sankarshan mukhopadhyay <sankarshan@fedoraproject.org>, 2010.
+# jdennis <jdennis@redhat.com>, 2011
+# sankarshan mukhopadhyay <sankarshan@fedoraproject.org>, 2010
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Bengali (India) <anubad@lists.ankur.org.in>\n"
+"Language: bn_IN\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: bn_IN\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 msgid "Passwords do not match"
@@ -52,9 +52,3 @@ msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে"
 #, python-format
 msgid "Added user \"%(value)s\""
 msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে"
-
-msgid "file operation"
-msgstr "ফাইল কার্য"
-
-msgid "cannot obtain next serial number"
-msgstr "সিরিয়াল নম্বর পাওয়া সম্ভব হয়নি"
diff --git a/install/po/ca.po b/install/po/ca.po
index 7a8a6b5bf..4edc1b904 100644
--- a/install/po/ca.po
+++ b/install/po/ca.po
@@ -3,20 +3,20 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# 	Jordi Mas Hernàndez <jmas@softcatala.org>, 2013.
+# jordimash <jmas@softcatala.org>, 2013
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Catalan <fedora@llistes.softcatala.org>\n"
+"Language: ca\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ca\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 msgid "Passwords do not match"
diff --git a/install/po/cs.po b/install/po/cs.po
index 8cbef6d39..062ae1dd4 100644
--- a/install/po/cs.po
+++ b/install/po/cs.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Petr Viktorin <encukou@gmail.com>, 2013.
+# Petr Viktorin <encukou@gmail.com>, 2013
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Czech (http://www.transifex.com/projects/p/fedora/language/"
 "cs/)\n"
+"Language: cs\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: cs\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
 #, python-format
diff --git a/install/po/de.po b/install/po/de.po
index 69c58d5a0..e69c5efdf 100644
--- a/install/po/de.po
+++ b/install/po/de.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Fabian Affolter <fab@fedoraproject.org>, 2011.
-# Mario Blättermann <mariobl@freenet.de>, 2011.
+# Fabian Affolter <fab@fedoraproject.org>, 2011
+# Mario Blättermann <mario.blaettermann@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: German <trans-de@lists.fedoraproject.org>\n"
+"Language: de\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: de\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #, python-format
diff --git a/install/po/es.po b/install/po/es.po
index 66d39b655..b72e5769a 100644
--- a/install/po/es.po
+++ b/install/po/es.po
@@ -3,26 +3,26 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Eduardo Villagrán M <gotencool@gmail.com>, 2012.
-#  <ehespinosa@ya.com>, 2013.
-# gguerrer <gguerrer@redhat.com>, 2011.
-# Héctor Daniel Cabrera <logan@fedoraproject.org>, 2011.
-# Hugo Jiménez Hernández <hjimenezhdez@gmail.com>, 2011.
-# jdennis <jdennis@redhat.com>, 2011.
-# Petr Viktorin <encukou@gmail.com>, 2012.
+# Eduardo Villagrán M <gotencool@gmail.com>, 2012
+# vareli <ehespinosa@ya.com>, 2013
+# Gladys Guerrero <gguerrer@redhat.com>, 2011
+# Daniel Cabrera <logan@fedoraproject.org>, 2011
+# Hugo Jiménez Hernández <hjimenezhdez@gmail.com>, 2011
+# jdennis <jdennis@redhat.com>, 2011
+# Petr Viktorin <encukou@gmail.com>, 2012
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Spanish <trans-es@lists.fedoraproject.org>\n"
+"Language: es\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: es\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #, python-format
@@ -39,6 +39,9 @@ msgstr "Tema comandos:"
 msgid "Command name"
 msgstr "Nombre del comando"
 
+msgid "Positional arguments"
+msgstr "Argumentos posicionales"
+
 msgid "No file to read"
 msgstr "No existe el fichero para leer"
 
@@ -58,6 +61,10 @@ msgid "error marshalling data for XML-RPC transport: %(error)s"
 msgstr "error de clasificación para el transporte de datos XML-RPC: %(error)s "
 
 #, python-format
+msgid "Missing or invalid HTTP Referer, %(referer)s"
+msgstr "Arbitro HTTP desaparecido o no válido, %(referer)s"
+
+#, python-format
 msgid "Kerberos error: %(major)s/%(minor)s"
 msgstr "Error de kerberos:  %(major)s/%(minor)s"
 
@@ -79,6 +86,9 @@ msgstr "Las credenciales de caché están mal formadas"
 msgid "Cannot resolve KDC for requested realm"
 msgstr "No es posible resolver KDC para el reinado solicitado"
 
+msgid "Session error"
+msgstr "Error de sesión"
+
 #, python-format
 msgid "Insufficient access: %(info)s"
 msgstr "Acceso insuficiente: %(info)s"
@@ -1301,12 +1311,30 @@ msgstr "Base para sujetos certificados (OU=Prueba,O=Ejemplo)"
 msgid "Default group objectclasses"
 msgstr "Grupo predeterminado objectclass"
 
+msgid "Default group objectclasses (comma-separated list)"
+msgstr "Clases de objeto grupo por defecto (lista separada por comas)"
+
 msgid "Default user objectclasses"
 msgstr "Usuario predeterminado objectclasses"
 
+msgid "Default user objectclasses (comma-separated list)"
+msgstr "Clases de objeto usuario por defecto (lista separada por comas)"
+
+msgid "Password Expiration Notification (days)"
+msgstr "Notificación de Expiración de Contraseña (días)"
+
+msgid "Number of days's notice of impending password expiration"
+msgstr "Aviso de número de días de expiración inminente de contraseña"
+
 msgid "Password plugin features"
 msgstr "Funciones del complemento de contraseña"
 
+msgid "Extra hashes to generate in password plug-in"
+msgstr "Hashes extra para generar en el plugin de contraseña"
+
+msgid "Modify configuration options."
+msgstr "Modificar opciones de configuración."
+
 msgid "The group doesn't exist"
 msgstr "El grupo no existe"
 
@@ -1314,9 +1342,21 @@ msgstr "El grupo no existe"
 msgid "attribute \"%s\" not allowed"
 msgstr "atributo \"%s\" no permitido"
 
+msgid "May not be empty"
+msgstr "Puede no estar vacío"
+
 msgid "Show the current configuration."
 msgstr "Muestra la configuración actual"
 
+msgid "delegation"
+msgstr "delegación"
+
+msgid "delegations"
+msgstr "delegaciones"
+
+msgid "Delegations"
+msgstr "Delegaciones"
+
 msgid "Delegation"
 msgstr "Delegación"
 
@@ -1329,24 +1369,45 @@ msgstr "Miembro del grupo de usuarios"
 msgid "User group to apply delegation to"
 msgstr "Grupo de usuarios para solicitar a la delegación"
 
+msgid "Add a new delegation."
+msgstr "Añadir una nueva delegación."
+
 #, python-format
 msgid "Added delegation \"%(value)s\""
 msgstr "Delegación añadida \"%(value)s\""
 
+msgid "Delete a delegation."
+msgstr "Borrar una delegación."
+
 #, python-format
 msgid "Deleted delegation \"%(value)s\""
 msgstr "Delegación eliminada \"%(value)s\""
 
+msgid "Modify a delegation."
+msgstr "Modificar una delegación."
+
 #, python-format
 msgid "Modified delegation \"%(value)s\""
 msgstr "Delegación modificada \"%(value)s\""
 
+msgid "Search for delegations."
+msgstr "Buscar delegaciones."
+
 #, python-format
 msgid "%(count)d delegation matched"
 msgid_plural "%(count)d delegations matched"
 msgstr[0] "%(count)d delegación coincidente"
 msgstr[1] "%(count)d delegaciones coincidentes"
 
+msgid "Display information about a delegation."
+msgstr "Mostrar información sobre una delegación."
+
+msgid "invalid IP address format"
+msgstr "formato no válido de dirección IP"
+
+msgid "invalid IP network format"
+msgstr "formato no válido de red IP"
+
 #, python-format
 msgid "DNS reverse zone for IP address %(addr)s not found"
 msgstr "Zona invertida DNS para dirección IP %(addr)s no encontrada"
@@ -1355,12 +1416,39 @@ msgstr "Zona invertida DNS para dirección IP %(addr)s no encontrada"
 msgid "DNS zone %(zone)s not found"
 msgstr "Zona DNS %(zone)s no encontrado"
 
+msgid "IP Address"
+msgstr "Dirección IP"
+
 msgid "Hostname"
 msgstr "Nombre del equipo anfitrión"
 
 msgid "Target"
 msgstr "Meta"
 
+msgid ""
+"format must be specified as\n"
+"    \"d1 [m1 [s1]] {\"N\"|\"S\"}  d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz"
+"[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n"
+"    where:\n"
+"       d1:     [0 .. 90]            (degrees latitude)\n"
+"       d2:     [0 .. 180]           (degrees longitude)\n"
+"       m1, m2: [0 .. 59]            (minutes latitude/longitude)\n"
+"       s1, s2: [0 .. 59.999]        (seconds latitude/longitude)\n"
+"       alt:    [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n"
+"       siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n"
+"    See RFC 1876 for details"
+msgstr ""
+"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz[\"m"
+"\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n"
+"donde:\n"
+"d1: [0 .. 90] (grados de latitud)\n"
+"d2: [0 .. 180] (grados de longitud)\n"
+"m1, m2: [0 .. 59] (minutos de latitud/longitud)\n"
+"s1, s2: [0 .. 59.999] (segundos de latitud/longitud)\n"
+"alt: [-100000.00 .. 42849672.95] BY .01 (altitud en metros)\n"
+"siz, hp, vp: [0 .. 90000000.00] (tamaño/precisión en metros)\n"
+"Vea RFC 1876 para detalles"
+
 msgid "Service"
 msgstr "Servicio"
 
@@ -1372,15 +1460,36 @@ msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record"
 msgstr ""
 "El servidor de nombre '%(host)s' no tiene su correspondiente registro  A/AAAA"
 
+msgid "DNS zone"
+msgstr "zona DNS"
+
+msgid "DNS zones"
+msgstr "zonas DNS"
+
+msgid "DNS Zones"
+msgstr "Zonas DNS"
+
+msgid "DNS Zone"
+msgstr "Zona DNS"
+
 msgid "Zone name"
 msgstr "Nombre de la zona"
 
 msgid "Zone name (FQDN)"
 msgstr "Nombre de la zona (FQDN)"
 
+msgid "Reverse zone IP network"
+msgstr "Zona reversa de red IP"
+
+msgid "IP network to create reverse zone name from"
+msgstr "Red IP para crear un nombre de zona reversa desde"
+
 msgid "Authoritative nameserver"
 msgstr "Nombre de servidor autoritativo"
 
+msgid "Authoritative nameserver domain name"
+msgstr "Nombre de dominio servidor de nombre autorizado"
+
 msgid "Administrator e-mail address"
 msgstr "Correo-e de administrador"
 
@@ -1441,16 +1550,43 @@ msgstr "Actualización dinámica"
 msgid "Allow dynamic updates."
 msgstr "Permitir actualizaciones dinámicas."
 
+msgid "Create new DNS zone (SOA record)."
+msgstr "Crear nueva zona DNS (registro SOA)."
+
 msgid "Force"
 msgstr "Forzar"
 
 msgid "DNS is not configured"
 msgstr "DNS no está configurado"
 
+msgid "Delete DNS zone (SOA record)."
+msgstr "Borrar zona DNS (registro SOA)."
+
+msgid "Modify DNS zone (SOA record)."
+msgstr "Modificar zona DNS (registro SOA)."
+
+msgid "Search for DNS zones (SOA records)."
+msgstr "Buscar zonas DNS (registros SOA)."
+
+msgid "Forward zones only"
+msgstr "Zonas de reenvío sólo"
+
+msgid "Search for forward zones only"
+msgstr "Buscar zonas de reenvío sólo"
+
+msgid "Display information about a DNS zone (SOA record)."
+msgstr "Mostrar información sobre una zona DNS (registro SOA)."
+
+msgid "Disable DNS Zone."
+msgstr "Deshabilitar Zona DNS."
+
 #, python-format
 msgid "Disabled DNS zone \"%(value)s\""
 msgstr "Zona de DNS desactivada \"%(value)s\" "
 
+msgid "Enable DNS Zone."
+msgstr "Habilitar Zona DNS."
+
 #, python-format
 msgid "Enabled DNS zone \"%(value)s\""
 msgstr "Zona DNS habilitada \" %(value)s \""
@@ -1458,6 +1594,15 @@ msgstr "Zona DNS habilitada \" %(value)s \""
 msgid "DNS resource record"
 msgstr "Registro de recursos DNS"
 
+msgid "DNS resource records"
+msgstr "Registros de recurso DNS"
+
+msgid "DNS Resource Records"
+msgstr "Registros de Recursos DNS"
+
+msgid "DNS Resource Record"
+msgstr "Registro de Recurso de DNS"
+
 msgid "Record name"
 msgstr "Nombre de registro"
 
@@ -1478,9 +1623,15 @@ msgstr ""
 "La zona invertida para registro PTR debería ser una sub-zona de uno de los "
 "siguientes dominios integramente cualificados: %s"
 
+msgid "Add new DNS resource record."
+msgstr "Añadir nuevo registro de recurso DNS."
+
 msgid "force NS record creation even if its hostname is not in DNS"
 msgstr "Forzar la creación del registro DNS, aunque su nombre no sea absoluto"
 
+msgid "Modify a DNS resource record."
+msgstr "Modificar un registro de recurso DNS."
+
 msgid "Current DNS record contents:\n"
 msgstr "Contenidos actuales del registro DNS:\n"
 
@@ -1488,6 +1639,9 @@ msgstr "Contenidos actuales del registro DNS:\n"
 msgid "Deleted record \"%(value)s\""
 msgstr "Registro eliminado \"%(value)s\""
 
+msgid "Delete DNS resource record."
+msgstr "Borrar un registro de recurso DNS."
+
 msgid ""
 "Neither --del-all nor options to delete a specific record provided.\n"
 "Command help may be consulted for all supported record types."
@@ -1506,6 +1660,15 @@ msgstr "Ninguna opción para  borrar un registro en concreto especificado."
 msgid "Delete all?"
 msgstr "¿Borrar todos?"
 
+msgid "Display DNS resource."
+msgstr "Mostrar un recurso DNS."
+
+msgid "Search for DNS resources."
+msgstr "Buscar recursos DNS."
+
+msgid "Resolve a host name in DNS."
+msgstr "Resolver un nombre de host en DNS."
+
 #, python-format
 msgid "Found '%(value)s'"
 msgstr "Ha sido encontrado '%(value)s'"
@@ -1596,9 +1759,21 @@ msgstr ""
 "\n"
 "Cambios a /etc/rhsm/rhsm.conf requieren un reinicio del servicio httpd.\\n\n"
 
+msgid "entitlement"
+msgstr "derecho"
+
+msgid "entitlements"
+msgstr "derechos"
+
 msgid "Entitlements"
 msgstr "Autorizaciones"
 
+msgid "Entitlement"
+msgstr "Derecho"
+
+msgid "Display current entitlements."
+msgstr "Mostrar derechos actuales."
+
 msgid "UUID"
 msgstr "UUID"
 
@@ -1611,10 +1786,16 @@ msgstr "Cantidad"
 msgid "Consumed"
 msgstr "Consumido"
 
+msgid "Consume an entitlement."
+msgstr "Consumir un derecho."
+
 #, python-format
 msgid "Consumed %(value)s entitlement(s)."
 msgstr "Derecho(s) consumido(s) %(value)s."
 
+msgid "Retrieve the entitlement certs."
+msgstr "Recuperar el derecho certs."
+
 msgid "Start"
 msgstr "Inicio"
 
@@ -1627,18 +1808,33 @@ msgstr "Número de serie"
 msgid "Not an entitlement certificate"
 msgstr "No es un certificado de derechos"
 
+msgid "Search for entitlement accounts."
+msgstr "Buscar cuentas de derecho."
+
+msgid "Register to the entitlement system."
+msgstr "Registro al sistema de derecho."
+
 msgid "Registered to entitlement server."
 msgstr "Registrado en el servidor de derechos."
 
 msgid "Username"
 msgstr "Nombre de usuario"
 
+msgid "Enrollment UUID (not implemented)"
+msgstr "Inscripción UUID (no implementado)"
+
 msgid "Registration password"
 msgstr "Contraseña de registro"
 
+msgid "Import an entitlement certificate."
+msgstr "Importar un certificado de derecho."
+
 msgid "Enrollment UUID"
 msgstr "Inscripción UUID"
 
+msgid "Re-sync the local entitlement cache with the entitlement server."
+msgstr "Resincronizar el cache de derecho local con el servidor de derecho."
+
 msgid "Entitlement(s) synchronized."
 msgstr "Derecho (s) sincronizado(s)."
 
@@ -1651,6 +1847,9 @@ msgstr "grupos"
 msgid "User Groups"
 msgstr "Grupos de usuarios"
 
+msgid "User Group"
+msgstr "Grupo Usuario"
+
 msgid "Group name"
 msgstr "Nombre del grupo"
 
@@ -1690,6 +1889,9 @@ msgstr "Ha sido modificado el grupo \"%(value)s\""
 msgid "change to a POSIX group"
 msgstr "Cambiar a un grupo POSIX"
 
+msgid "Search for groups."
+msgstr "Buscar grupos."
+
 #, python-format
 msgid "%(count)d group matched"
 msgid_plural "%(count)d groups matched"
@@ -1699,12 +1901,18 @@ msgstr[1] "%(count)d grupos coincidentes"
 msgid "search for private groups"
 msgstr "Búsqueda de grupos privados"
 
+msgid "Display information about a named group."
+msgstr "Mostrar información sobre un grupo denominado."
+
 msgid "Add members to a group."
 msgstr "Agregar miembro a un grupo."
 
 msgid "Remove members from a group."
 msgstr "Eliminar miembro desde un grupo."
 
+msgid "Detach a managed group from a user."
+msgstr "Desenganchar un grupo gestionado desde un usuario."
+
 #, python-format
 msgid "Detached group \"%(value)s\" from user \"%(value)s\""
 msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\""
@@ -1718,12 +1926,30 @@ msgstr "no se permite modificar las entradas de los grupos"
 msgid "Not a managed group"
 msgstr "No es un grupo administrado"
 
+msgid "Host-based access control commands"
+msgstr "Comandos de control de acceso basado en host"
+
+msgid "The deny type has been deprecated."
+msgstr "El tipo deny ha quedado obsoleto."
+
+msgid "HBAC rule"
+msgstr "Regla HBAC"
+
+msgid "HBAC rules"
+msgstr "Reglas HBAC"
+
+msgid "HBAC Rules"
+msgstr "Reglas HBAC"
+
 msgid "HBAC Rule"
 msgstr "REgla HBAC"
 
 msgid "Rule name"
 msgstr "Nombre de la regla"
 
+msgid "Rule type (allow)"
+msgstr "Tipo de regla (permitir)"
+
 msgid "Rule type"
 msgstr "Tipo de regla"
 
@@ -1763,28 +1989,49 @@ msgstr "Sevicios HBAC"
 msgid "Service Groups"
 msgstr "    Búsqueda de servicios HBAC."
 
+msgid "Create a new HBAC rule."
+msgstr "Crear una nueva regla HBAC."
+
 #, python-format
 msgid "Added HBAC rule \"%(value)s\""
 msgstr "Añadida regla HBAC \"%(value)s\""
 
+msgid "Delete an HBAC rule."
+msgstr "Borrar una regla HBAC."
+
 #, python-format
 msgid "Deleted HBAC rule \"%(value)s\""
 msgstr "Suprimida regla HBAC \"%(value)s\""
 
+msgid "Modify an HBAC rule."
+msgstr "Modificar una regla HBAC."
+
 #, python-format
 msgid "Modified HBAC rule \"%(value)s\""
 msgstr "Modificada regla HBAC \"%(value)s\""
 
+msgid "Search for HBAC rules."
+msgstr "Buscar reglas HBAC."
+
 #, python-format
 msgid "%(count)d HBAC rule matched"
 msgid_plural "%(count)d HBAC rules matched"
 msgstr[0] "%(count)d regla coincidente de HBAC"
 msgstr[1] "%(count)d reglas coincidentes de HBAC "
 
+msgid "Display the properties of an HBAC rule."
+msgstr "Mostrar las propiedades de una regla HBAC."
+
+msgid "Enable an HBAC rule."
+msgstr "Habilitar una regla HBAC."
+
 #, python-format
 msgid "Enabled HBAC rule \"%(value)s\""
 msgstr "Habilitada regla HBAC \"%(value)s\""
 
+msgid "Disable an HBAC rule."
+msgstr "Deshabilitar una regla HBAC."
+
 #, python-format
 msgid "Disabled HBAC rule \"%(value)s\""
 msgstr "\"%(value)s\" regla HBAC desactivada    "
@@ -1792,6 +2039,24 @@ msgstr "\"%(value)s\" regla HBAC desactivada    "
 msgid "Access time"
 msgstr "Hora de acceso"
 
+msgid "Add users and groups to an HBAC rule."
+msgstr "Añadir usuarios y grupos a una regla HBAC."
+
+msgid "Remove users and groups from an HBAC rule."
+msgstr "Borrar usuarios y grupos de una regla HBAC."
+
+msgid "Add target hosts and hostgroups to an HBAC rule."
+msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC."
+
+msgid "Remove target hosts and hostgroups from an HBAC rule."
+msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC."
+
+msgid "Add services to an HBAC rule."
+msgstr "Añadir servicios a una regla HBAC."
+
+msgid "Remove service and service groups from an HBAC rule."
+msgstr "Borrar servicio y grupos de servicio de una regla HBAC."
+
 msgid ""
 "\n"
 "HBAC Services\n"
@@ -1839,36 +2104,72 @@ msgstr ""
 "   ipa hbacsvc-del tftp\n"
 "\n"
 
+msgid "Host based access control commands"
+msgstr "Comandos de control de acceso basado en host"
+
 msgid "HBAC service"
 msgstr "Servicio HBAC"
 
+msgid "HBAC services"
+msgstr "Servicios HBAC"
+
 msgid "HBAC Services"
 msgstr "Servicios HBAC"
 
+msgid "HBAC Service"
+msgstr "Servicio HBAC"
+
 msgid "Service name"
 msgstr "% (Count) d HBAC servicios encontrados"
 
 msgid "HBAC service description"
 msgstr "Descripción de servicio HBAC"
 
+msgid "Add a new HBAC service."
+msgstr "Añadir un nuevo servicio HBAC."
+
 #, python-format
 msgid "Added HBAC service \"%(value)s\""
 msgstr "Servicio de HBAC \"%(value)s\" añadido"
 
+msgid "Delete an existing HBAC service."
+msgstr "Borrar un servicio HBAC existente."
+
 #, python-format
 msgid "Deleted HBAC service \"%(value)s\""
 msgstr "Suprimido el servicio HBAC \"%(value)s\""
 
+msgid "Modify an HBAC service."
+msgstr "Modificar un servicio HBAC."
+
 #, python-format
 msgid "Modified HBAC service \"%(value)s\""
 msgstr "    Servicio modificado HBAC \"%(value)s\""
 
+msgid "Search for HBAC services."
+msgstr "Buscar un servicio HBAC."
+
 #, python-format
 msgid "%(count)d HBAC service matched"
 msgid_plural "%(count)d HBAC services matched"
 msgstr[0] "Servicio HBAC %(count)d coincidente"
 msgstr[1] "Servicios HBAC %(count)d coincidentes"
 
+msgid "Display information about an HBAC service."
+msgstr "Mostrar información sobre un servicio HBAC."
+
+msgid "HBAC service group"
+msgstr "Grupo de servicio HBAC"
+
+msgid "HBAC service groups"
+msgstr "Grupos de servicio HBAC"
+
+msgid "HBAC Service Groups"
+msgstr "Grupos de Servicios HBAC"
+
+msgid "HBAC Service Group"
+msgstr "Grupo de Servicio HBAC"
+
 msgid "Service group name"
 msgstr ""
 "    Desactivar la tecla de Kerberos, certificado SSL y todos los servicios "
@@ -1877,36 +2178,101 @@ msgstr ""
 msgid "HBAC service group description"
 msgstr "Servicios y grupos especificados"
 
+msgid "Add a new HBAC service group."
+msgstr "Añadir un nuevo grupo de servicio HBAC."
+
 #, python-format
 msgid "Added HBAC service group \"%(value)s\""
 msgstr "Agregado servicio de grupo HBAC \"%(value)s\""
 
+msgid "Delete an HBAC service group."
+msgstr "Borrar un grupo de servicio HBAC."
+
 #, python-format
 msgid "Deleted HBAC service group \"%(value)s\""
 msgstr "    Suprimido el servicio HBAC grupo \"%(value)s\""
 
+msgid "Modify an HBAC service group."
+msgstr "Modificar un grupo de servicio HBAC."
+
 #, python-format
 msgid "Modified HBAC service group \"%(value)s\""
 msgstr "Servicio modificado HBAC grupo \"%(value)s\""
 
+msgid "Search for an HBAC service group."
+msgstr "Buscar un grupo de servicio HBAC."
+
 #, python-format
 msgid "%(count)d HBAC service group matched"
 msgid_plural "%(count)d HBAC service groups matched"
 msgstr[0] "%(count)d grupo de servicio HBAC coincidente"
 msgstr[1] "%(count)d grupos de servicio HBAC coincidentes"
 
+msgid "Display information about an HBAC service group."
+msgstr "Mostrar información sobre un grupo de servicio HBAC."
+
+msgid "Add members to an HBAC service group."
+msgstr "Añadir miembros a un grupo de servicio HBAC."
+
+msgid "Remove members from an HBAC service group."
+msgstr "Borrar miembros de un grupo de servicio HBAC."
+
+msgid "Simulate use of Host-based access controls"
+msgstr "Simular el uso de controles de acceso basados en Host"
+
+msgid "Matched rules"
+msgstr "Reglas coincidentes"
+
+msgid "Not matched rules"
+msgstr "Reglas no coincidentes"
+
+msgid "Non-existent or invalid rules"
+msgstr "Reglas no existentes o no válidas"
+
+msgid "Result of simulation"
+msgstr "Resultado de la simulación"
+
 msgid "User name"
 msgstr "Nombre de usuario"
 
+msgid "Target host"
+msgstr "Host objetivo"
+
+msgid "Rules to test. If not specified, --enabled is assumed"
+msgstr "Reglas para probar. Si no se especifica, - se asume que habilitado"
+
+msgid "Hide details which rules are matched, not matched, or invalid"
+msgstr ""
+"Esconder detalles de que reglas coinciden, no coinciden o son no válidas"
+
+msgid "Include all enabled IPA rules into test [default]"
+msgstr "Incluir todas las reglas IPA habilitadas en la prueba [por defecto]"
+
+msgid "Include all disabled IPA rules into test"
+msgstr "Incluir todas las reglas IPA deshabilitadas en la prueba"
+
 msgid "Unresolved rules in --rules"
 msgstr "Eliminar miembro desde un grupo."
 
+#, python-format
+msgid "Access granted: %s"
+msgstr "Acceso obtenido: %s"
+
 msgid "Keytab"
 msgstr "Keytab"
 
 msgid "Failed managedby"
 msgstr "Falló managedby"
 
+msgid "host"
+msgstr "host"
+
+msgid "hosts"
+msgstr "hosts"
+
+msgid "Host"
+msgstr "Host"
+
 msgid "Host name"
 msgstr "Nombre del equipo"
 
@@ -1953,6 +2319,9 @@ msgstr "Certificado del servidor codificado con base-64"
 msgid "Principal name"
 msgstr "Nombre principal"
 
+msgid "Add a new host."
+msgstr "Añadir un n uevo host."
+
 #, python-format
 msgid "Added host \"%(value)s\""
 msgstr "Ha sido agregado el equipo \"%(value)s\""
@@ -1971,6 +2340,9 @@ msgstr "Agregar el host de DNS con esta dirección IP"
 msgid "The host was added but the DNS update failed with: %(exc)s"
 msgstr "El host fue añadido, pero la actualización de DNS falló con:%(exc)s"
 
+msgid "Delete a host."
+msgstr "Borrar un host."
+
 #, python-format
 msgid "Deleted host \"%(value)s\""
 msgstr "Ha sido eliminado el equipo \"%(value)s\""
@@ -1978,6 +2350,9 @@ msgstr "Ha sido eliminado el equipo \"%(value)s\""
 msgid "Remove entries from DNS"
 msgstr "Eliminar entradas de DNS"
 
+msgid "Modify information about a host."
+msgstr "Modificar información sobre un host."
+
 #, python-format
 msgid "Modified host \"%(value)s\""
 msgstr "Ha sido modificado el equipo \"%(value)s\""
@@ -1985,12 +2360,21 @@ msgstr "Ha sido modificado el equipo \"%(value)s\""
 msgid "Kerberos principal name for this host"
 msgstr "Nombre del prinicpal de Kerberos para este equipo"
 
+msgid "Password cannot be set on enrolled host."
+msgstr "La contraseña no puede ser fijada en el host matriculado."
+
+msgid "Search for hosts."
+msgstr "Buscar hosts."
+
 #, python-format
 msgid "%(count)d host matched"
 msgid_plural "%(count)d hosts matched"
 msgstr[0] "%(count)d equipo coincidente"
 msgstr[1] "%(count)d equipos coincidentes"
 
+msgid "Display information about a host."
+msgstr "Mostrar información sobre un host."
+
 msgid "file to store certificate in"
 msgstr "archivo para almacenar"
 
@@ -1998,10 +2382,30 @@ msgstr "archivo para almacenar"
 msgid "Certificate stored in file '%(file)s'"
 msgstr "Certificado almacenado en el archivo '%(file)s'"
 
+msgid "Disable the Kerberos key, SSL certificate and all services of a host."
+msgstr ""
+"Deshabilitar la clave Kerberos, el certificado SSL y todos los servicios de "
+"un host."
+
 #, python-format
 msgid "Disabled host \"%(value)s\""
 msgstr "Host desactivado \"%(value)s\""
 
+msgid "Add hosts that can manage this host."
+msgstr "Añadir hosts que pueda manejar este host."
+
+msgid "Remove hosts that can manage this host."
+msgstr "Borrar hosts que puede manejar este host."
+
+msgid "host group"
+msgstr "grupo de host"
+
+msgid "host groups"
+msgstr "grupos de host"
+
+msgid "Host Group"
+msgstr "Grupo de Host"
+
 msgid "Host-group"
 msgstr "Grupo de equipo"
 
@@ -2011,42 +2415,128 @@ msgstr "Nombre del grupo de equipo"
 msgid "A description of this host-group"
 msgstr "Una descripción de este grupo de equipo"
 
+msgid "Add a new hostgroup."
+msgstr "Añadir un nuevo grupo de host."
+
 #, python-format
 msgid "Added hostgroup \"%(value)s\""
 msgstr "Ha sido agregado el grupo de equipo \"%(value)s\""
 
 #, python-format
+msgid ""
+"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
+"common namespace"
+msgstr ""
+"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red "
+"comparten un espacio de nombre común"
+
+msgid "Delete a hostgroup."
+msgstr "Borrar un grupo de host."
+
+#, python-format
 msgid "Deleted hostgroup \"%(value)s\""
 msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\""
 
+msgid "Modify a hostgroup."
+msgstr "Modificar un grupo de host."
+
 #, python-format
 msgid "Modified hostgroup \"%(value)s\""
 msgstr "Ha sido modificado el grupo de equipo \"%(value)s\""
 
+msgid "Search for hostgroups."
+msgstr "Buscar grupos de host."
+
 #, python-format
 msgid "%(count)d hostgroup matched"
 msgid_plural "%(count)d hostgroups matched"
 msgstr[0] "%(count)d grupo de equipos coincidente"
 msgstr[1] "%(count)d grupos de equipos coincidentes"
 
+msgid "Display information about a hostgroup."
+msgstr "Mostrar información sobre un grupo de host."
+
+msgid "Add members to a hostgroup."
+msgstr "Añadir miembros a un grupo de host."
+
+msgid "Remove members from a hostgroup."
+msgstr "Borrar miembros de un grupo de host."
+
 msgid "Name of object to export"
 msgstr "Nombre del objeto a exportar"
 
 msgid "Name of method to export"
 msgstr "Nombre del método para exportación"
 
+msgid "Name of command to export"
+msgstr "Nombre de comando a exportar"
+
 msgid "Dict of JSON encoded IPA Objects"
 msgstr "El dict de JSON ha codificado objetos IPA"
 
 msgid "Dict of JSON encoded IPA Methods"
 msgstr "Métodos IPA  codificados de Dict de JSON "
 
+msgid "Dict of JSON encoded IPA Commands"
+msgstr "Dict de JSON comandos codificados IPA"
+
+msgid "Add RunAs ${other_entity} into ${entity} ${primary_key}"
+msgstr "Añadir RunAs ${other_entity} en ${entity} ${primary_key}"
+
+msgid "Add RunAs Groups into ${entity} ${primary_key}"
+msgstr "Añadir RunAs Grupos en ${entity} ${primary_key}"
+
+msgid "Add ${other_entity} Managing ${entity} ${primary_key}"
+msgstr "Añadir ${other_entity} Gestionando ${entity} ${primary_key}"
+
 msgid "Add ${other_entity} into ${entity} ${primary_key}"
 msgstr "Añadir ${other_entity} a ${entity} ${primary_key}"
 
+msgid "Add Allow ${other_entity} into ${entity} ${primary_key}"
+msgstr "Añadir Permitir ${other_entity} en ${entity} ${primary_key}"
+
+msgid "Add Deny ${other_entity} into ${entity} ${primary_key}"
+msgstr "Añadir Denegar ${other_entity} en ${entity} ${primary_key}"
+
+msgid "Add ${entity} ${primary_key} into ${other_entity}"
+msgstr "Añadir ${entity} ${primary_key} en ${other_entity}"
+
+msgid "Direct Membership"
+msgstr "Afiliación Directa"
+
+msgid "Indirect Membership"
+msgstr "Afiliación Indirecta"
+
+msgid "No entries."
+msgstr "Sin entradas."
+
+msgid "Showing ${start} to ${end} of ${total} entries."
+msgstr "Mostrando ${start} a ${end} de ${total} entradas."
+
+msgid "Remove RunAs ${other_entity} from ${entity} ${primary_key}"
+msgstr "Quitar RunAs ${other_entity} de ${entity} ${primary_key}"
+
+msgid "Remove RunAs Groups from ${entity} ${primary_key}"
+msgstr "Quitar Grupos RunAs de ${entity} ${primary_key}"
+
+msgid "Remove ${other_entity} Managing ${entity} ${primary_key}"
+msgstr "Quitar ${other_entity} Gestionando ${entity} ${primary_key}"
+
 msgid "Remove ${other_entity} from ${entity} ${primary_key}"
 msgstr "Retirar ${other_entity} de ${entity} ${primary_key}"
 
+msgid "Remove Allow ${other_entity} from ${entity} ${primary_key}"
+msgstr "Quitar Permitir ${other_entity} de ${entity} ${primary_key}"
+
+msgid "Remove Deny ${other_entity} from ${entity} ${primary_key}"
+msgstr "Quitar Denegar ${other_entity} de ${entity} ${primary_key}"
+
+msgid "Remove ${entity} ${primary_key} from ${other_entity}"
+msgstr "Quitar ${entity} ${primary_key} de ${other_entity}"
+
+msgid "Show Results"
+msgstr "Mostrar Resultados"
+
 msgid "Add"
 msgstr "Agregar"
 
@@ -2101,6 +2591,12 @@ msgstr "Actualizar"
 msgid "View"
 msgstr "Ver"
 
+msgid "Collapse All"
+msgstr "Cerrar Todo"
+
+msgid "Expand All"
+msgstr "Expandir Todo"
+
 msgid "General"
 msgstr "General"
 
@@ -2113,21 +2609,90 @@ msgstr "Configuraciones de  ${entity} ${primary_key}"
 msgid "Back to Top"
 msgstr "Volver al comienzo"
 
+msgid "${entity} successfully added"
+msgstr "${entity} añadido con éxito"
+
+msgid "Add ${entity}"
+msgstr "Añadir ${entity}"
+
 msgid "Available"
 msgstr "Disponible"
 
+msgid "Some operations failed."
+msgstr "Algunas operaciones fallaron."
+
+msgid "Operations Error"
+msgstr "Error en Operaciones"
+
+msgid "Confirmation"
+msgstr "Confirmación "
+
 msgid "This page has unsaved changes. Please save or revert."
 msgstr "Esta página tiene cambios sin guardar. Por favor, guardar o deshacer."
 
+msgid "Unsaved Changes"
+msgstr "Cambios No Guardados"
+
+msgid "Hide details"
+msgstr "Esconder detalles"
+
 msgid "Prospective"
 msgstr "Prospectivo"
 
+msgid "Redirection"
+msgstr "Redirección "
+
+msgid "Select entries to be removed."
+msgstr "Las entradas seleccionadas han sido quitadas."
+
+msgid "Remove ${entity}"
+msgstr "Quitar ${entity}"
+
+msgid "Show details"
+msgstr "Mostrar detalles"
+
+msgid "Validation error"
+msgstr "Error de validación"
+
+msgid "Input form contains invalid or missing values."
+msgstr "La entrada contiene valores no válidos o desaparecidos."
+
+msgid "HTTP Error"
+msgstr "Error HTTP"
+
+msgid "Internal Error"
+msgstr "Error Interno"
+
+msgid "IPA Error"
+msgstr "Error IPA"
+
+msgid "No response"
+msgstr "Sin respuesta"
+
+msgid "Unknown Error"
+msgstr "Error Desconocido"
+
+msgid "URL"
+msgstr "URL"
+
+msgid "${primary_key} is managed by:"
+msgstr "${primary_key} es gestionada por:"
+
+msgid "${primary_key} members:"
+msgstr "${primary_key} miembros:"
+
+msgid "${primary_key} is a member of:"
+msgstr "${primary_key} es un miembro de:"
+
 msgid "Settings"
 msgstr "Configuración"
 
 msgid "Search"
 msgstr "Búsqueda"
 
+msgid "False"
+msgstr "Falso"
+
 msgid "Logged In As"
 msgstr "Registrado como"
 
@@ -2137,6 +2702,15 @@ msgstr "Atributo"
 msgid "Automount Location Settings"
 msgstr "Configuración de ubicación de automount"
 
+msgid "Map Type"
+msgstr "Tipo de Mapa"
+
+msgid "Direct"
+msgstr "Directo"
+
+msgid "Indirect"
+msgstr "Indirecto"
+
 msgid "AA Compromise"
 msgstr "AA transacción"
 
@@ -2146,6 +2720,9 @@ msgstr "Afiliación cambiada"
 msgid "CA Compromise"
 msgstr "CA de transacción"
 
+msgid "Certificates"
+msgstr "Certificados"
+
 msgid "Certificate Hold"
 msgstr "Certificado retenido"
 
@@ -2244,15 +2821,78 @@ msgstr "Validez"
 msgid "Certificate for ${entity} ${primary_key}"
 msgstr "Certificado para ${entity} ${primary_key}"
 
+msgid "Group Options"
+msgstr "Opciones de Grupo"
+
+msgid "Search Options"
+msgstr "Opciones de Búsqueda"
+
+msgid "User Options"
+msgstr "Opciones de Usuario"
+
+msgid "Options"
+msgstr "Opciones"
+
 msgid "Data"
 msgstr "Datos"
 
+msgid "DNS record was deleted because it contained no data."
+msgstr "Registro DNS fue borrado porque no contenía datos."
+
+msgid "Other Record Types"
+msgstr "Otros Tipos de Registro"
+
+msgid "You will be redirected to DNS Zone."
+msgstr "Será redirigido a Zona DNS."
+
+msgid "Standard Record Types"
+msgstr "Tipos de Registro Estándar"
+
 msgid "Records for DNS Zone"
 msgstr "Los registros para la zona DNS"
 
+msgid "Record Type"
+msgstr "Tipo de Registro"
+
 msgid "DNS Zone Settings"
 msgstr "Configuración de la Zona DNS"
 
+msgid "Account"
+msgstr "Cuenta"
+
+msgid "Consume"
+msgstr "Consumir"
+
+msgid "Consume Entitlement"
+msgstr "Consumir Derecho"
+
+msgid "Download"
+msgstr "Descarga"
+
+msgid "Download Certificate"
+msgstr "Certificado de Descarga"
+
+msgid "Import"
+msgstr "Importar"
+
+msgid "Import Certificate"
+msgstr "Importar Certificado"
+
+msgid "Enter the Base64-encoded entitlement certificate below:"
+msgstr "Introduzca el derecho codificado Base64 certificado abajo:"
+
+msgid "Loading..."
+msgstr "Cargando…"
+
+msgid "No Certificate."
+msgstr "Sin Certificado."
+
+msgid "Register"
+msgstr "Registrar"
+
+msgid "Registration"
+msgstr "Registro"
+
 msgid "Group Settings"
 msgstr "Configuración del grupo"
 
@@ -2289,6 +2929,39 @@ msgstr "Usuarios y grupos específicos"
 msgid "Who"
 msgstr "¿Quién?"
 
+msgid "Access Denied"
+msgstr "Acceso Denegado"
+
+msgid "Access Granted"
+msgstr "Acceso Obtenido"
+
+msgid "Include Disabled"
+msgstr "Include Deshabilitado"
+
+msgid "Include Enabled"
+msgstr "Include Habilitado"
+
+msgid "HBAC Test"
+msgstr "Prueba HBAC"
+
+msgid "Matched"
+msgstr "Emparejado"
+
+msgid "New Test"
+msgstr "Nueva Prueba"
+
+msgid "Rules"
+msgstr "Reglas"
+
+msgid "Run Test"
+msgstr "Ejecutar Prueba"
+
+msgid "Specify external ${entity}"
+msgstr "Especificar ${entity} externa"
+
+msgid "Unmatched"
+msgstr "Desemparejado"
+
 msgid "Host Certificate"
 msgstr "Certificado de host"
 
@@ -2307,15 +2980,36 @@ msgstr "Inscripción"
 msgid "Fully Qualified Host Name"
 msgstr "Nombre de host totalmente calificado"
 
+msgid "Kerberos Key"
+msgstr "Clave Kerberos"
+
 msgid "Kerberos Key Not Present"
 msgstr "No hay clave Kerberos Presente"
 
 msgid "Kerberos Key Present, Host Provisioned"
 msgstr "Claves de Kerberos presente, Host aprovisionado"
 
+msgid "One-Time-Password"
+msgstr "Contraseña de Una Vez"
+
+msgid "One-Time-Password Not Present"
+msgstr "Contraseña de Una Vez No Presente"
+
+msgid "One-Time-Password Present"
+msgstr "Contraseña de Una Vez Presente"
+
+msgid "Reset OTP"
+msgstr "Reajustar OTP"
+
+msgid "Reset One-Time-Password"
+msgstr "Reajustar Contraseña de Una Vez"
+
 msgid "Set OTP"
 msgstr "Establecer OTP"
 
+msgid "Set One-Time-Password"
+msgstr "Fijar Contraseña de Una Vez"
+
 msgid "Unprovision"
 msgstr "Unprovision"
 
@@ -2403,6 +3097,9 @@ msgstr "Grupos especificados"
 msgid "Account Settings"
 msgstr "Configuración de la cuenta"
 
+msgid "Account Status"
+msgstr "Estado de Cuenta"
+
 msgid "Contact Settings"
 msgstr "Configuración de contactos"
 
@@ -2418,6 +3115,22 @@ msgstr "Dirección de correo"
 msgid "Misc. Information"
 msgstr "Información diversa"
 
+msgid ""
+"Are you sure you want to ${action} the user?<br/>The change will take effect "
+"immediately."
+msgstr ""
+"¿Está seguro que desea ${action} el usuario?<br/>El cambio tendrá efecto "
+"inmediatamente."
+
+msgid "Click to ${action}"
+msgstr "Pulse para ${action}"
+
+msgid "Current Password"
+msgstr "Contraseña Actual"
+
+msgid "Current password is required"
+msgstr "Se necesita contraseña actual"
+
 msgid "New Password"
 msgstr "Nueva Contraseña"
 
@@ -2430,9 +3143,15 @@ msgstr "Las contraseñas deben coincidir"
 msgid "Reset Password"
 msgstr "Restablecer contraseña"
 
+msgid "Verify Password"
+msgstr "Verificar Contraseña"
+
 msgid "Are you sure you want to delete selected entries?"
 msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?"
 
+msgid "Some entries were not deleted"
+msgstr "Algunas entradas no fueron borradas"
+
 msgid "Quick Links"
 msgstr "Enlaces rápidos"
 
@@ -2473,9 +3192,39 @@ msgstr "Control de acceso basado en rol"
 msgid "Sudo"
 msgstr "Sudo"
 
+msgid "True"
+msgstr "Verdad"
+
+msgid "Next"
+msgstr "Siguiente"
+
+msgid "Page"
+msgstr "Página"
+
+msgid "Prev"
+msgstr "Anterior"
+
+msgid "undo"
+msgstr "deshacer"
+
+msgid "undo all"
+msgstr "deshacer todo"
+
 msgid "Text does not match field pattern"
 msgstr "El texto no coincide con el patrón de campo"
 
+msgid "Must be an integer"
+msgstr "Debe ser un entero"
+
+msgid "Maximum value is ${value}"
+msgstr "Valor máximo es ${value}"
+
+msgid "Minimum value is ${value}"
+msgstr "Valor mínimo es ${value}"
+
+msgid "Required field"
+msgstr "Campo requerido"
+
 msgid "Dict of I18N messages"
 msgstr "Dictado de los mensajes regionales"
 
@@ -2551,6 +3300,9 @@ msgstr ""
 "agregar usuarios, restablecer contraseñas o añadir un usuario al grupo de "
 "usuarios predeterminado de la IPA.\n"
 
+msgid "kerberos ticket policy settings"
+msgstr "ajustes de la entrada de política kerberos"
+
 msgid "Manage ticket policy for specific user"
 msgstr "Administra política de ticket para un usuario específico"
 
@@ -2566,6 +3318,15 @@ msgstr "Renovación máxima"
 msgid "Maximum renewable age (seconds)"
 msgstr "Duración máxima renovable (en segundos)"
 
+msgid "Modify Kerberos ticket policy."
+msgstr "Modificar entrada de política Kerberos."
+
+msgid "Display the current Kerberos ticket policy."
+msgstr "Mostrar la actual entrada de política Kerberos."
+
+msgid "Reset Kerberos ticket policy to the default values."
+msgstr "Reajustar la entrada de política Kerberos a los valores por defecto."
+
 #, python-format
 msgid ""
 "Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually."
@@ -2580,9 +3341,25 @@ msgstr ""
 "Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa "
 "group-add-member' para agregarlo manualmente.  "
 
+msgid "Migration of LDAP search reference is not supported."
+msgstr "Migración de búsqueda de referencia LDAP no está soportada."
+
+msgid "Malformed DN"
+msgstr "DN Malformado"
+
+msgid ""
+". Check GID of the existing group. Use --group-overwrite-gid option to "
+"overwrite the GID"
+msgstr ""
+". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid "
+"para anular la GID"
+
 msgid "Invalid LDAP URI."
 msgstr " URI LDAP no válida."
 
+msgid "Migrate users and groups from DS to IPA."
+msgstr "Migrar usuarios y grupos de DS a IPA."
+
 msgid "LDAP URI"
 msgstr "LDAP URI"
 
@@ -2607,6 +3384,28 @@ msgstr "Clase de objeto de usuario"
 msgid "Group object class"
 msgstr "Clase de objeto de grupo"
 
+msgid "Ignore user object class"
+msgstr "Ignorar clase de objeto usuario"
+
+msgid "Ignore user attribute"
+msgstr "Ignorar atributo de usuario"
+
+msgid "Ignore group object class"
+msgstr "Ignorar clase de objeto grupo"
+
+msgid "Ignore group attribute"
+msgstr "Ignorar atributo de grupo"
+
+msgid "Overwrite GID"
+msgstr "Sobrescribir GID"
+
+msgid ""
+"When migrating a group already existing in IPA domain overwrite the group "
+"GID and report as success"
+msgstr ""
+"Cuando se migra un grupo que ya existe en el dominio IPA se sobrescribe el "
+"GID de grupo e informa como conseguido"
+
 msgid "LDAP schema"
 msgstr "Esquema LDAP"
 
@@ -2617,6 +3416,9 @@ msgstr ""
 "El esquema utilizado en el servidor LDAP. Los valores admitidos son RFC2307 "
 "y RFC2307bis. El valor predeterminado es RFC2307bis"
 
+msgid "Continue"
+msgstr "Continuar"
+
 msgid ""
 "Continuous operation mode. Errors are reported but the process continues"
 msgstr ""
@@ -2665,6 +3467,9 @@ msgstr ""
 "\n"
 "Misc plug-ins\n"
 
+msgid "Show environment variables."
+msgstr "Mostrar variables de entorno."
+
 #, python-format
 msgid "%(count)d variables"
 msgstr "%(count)d variables"
@@ -2683,6 +3488,9 @@ msgstr "Cantidad total de variables env (>= count)"
 msgid "Number of variables returned (<= total)"
 msgstr "Cantidad de variables devueltas (<= total)"
 
+msgid "Show all loaded plugins."
+msgstr "Mostrar todos los plugins cargados."
+
 #, python-format
 msgid "%(count)d plugin loaded"
 msgid_plural "%(count)d plugins loaded"
@@ -2695,9 +3503,18 @@ msgstr "Cantidad de complementos cargados"
 msgid "Member Host"
 msgstr "Miembro del equipo anfitrión"
 
+msgid "netgroup"
+msgstr "grupo de red"
+
+msgid "netgroups"
+msgstr "grupos de red"
+
 msgid "Netgroups"
 msgstr "Grupos de red"
 
+msgid "Netgroup"
+msgstr "Grupo de red"
+
 msgid "Netgroup name"
 msgstr "Nombre de grupo de red"
 
@@ -2710,24 +3527,56 @@ msgstr "Nombre del dominio NIS"
 msgid "IPA unique ID"
 msgstr "ID unico de IPA"
 
+msgid "Add a new netgroup."
+msgstr "Añadir un nuevo grupo de red."
+
 #, python-format
 msgid "Added netgroup \"%(value)s\""
 msgstr "\"%(value)s\"netgroup añadido"
 
 #, python-format
+msgid ""
+"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
+"common namespace"
+msgstr ""
+"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos "
+"de red comparten un espacio de nombre común"
+
+msgid "Delete a netgroup."
+msgstr "Borrar un grupo de red."
+
+#, python-format
 msgid "Deleted netgroup \"%(value)s\""
 msgstr "%(value)s\" de netgroup eliminados"
 
+msgid "Modify a netgroup."
+msgstr "Modificar un grupo de red."
+
 #, python-format
 msgid "Modified netgroup \"%(value)s\""
 msgstr "netgroup modificado \"%(value)s\""
 
+msgid "Search for a netgroup."
+msgstr "Buscar un grupo de red."
+
 #, python-format
 msgid "%(count)d netgroup matched"
 msgid_plural "%(count)d netgroups matched"
 msgstr[0] "%(count)d autoservicio coincidente"
 msgstr[1] "%(count)d autoservicios coincidentes"
 
+msgid "search for managed groups"
+msgstr "buscar grupos gestionados"
+
+msgid "Display information about a netgroup."
+msgstr "Mostrar información sobre un grupo de red."
+
+msgid "Add members to a netgroup."
+msgstr "Añadir miembros a un grupo de red."
+
+msgid "Remove members from a netgroup."
+msgstr "Borrar miembros de un grupo de red."
+
 msgid ""
 "\n"
 "Set a user's password\n"
@@ -2763,6 +3612,9 @@ msgstr ""
 " Para cambiar la contraseña de otro usuario:\n"
 "   ipa passwd tuser1\n"
 
+msgid "Set a user's password."
+msgstr "Fijar una contraseña de usuario."
+
 #, python-format
 msgid "Changed password for \"%(value)s\""
 msgstr "Cambio de contraseña para \"%(value)s\""
@@ -2878,6 +3730,12 @@ msgstr ""
 msgid "Permission Type"
 msgstr "Tipo de permiso"
 
+msgid "permission"
+msgstr "permiso"
+
+msgid "permissions"
+msgstr "permisos"
+
 msgid "Permission name"
 msgstr "Nombre de permiso"
 
@@ -2898,24 +3756,42 @@ msgstr "Subárbol para aplicar permisos"
 msgid "User group to apply permissions to"
 msgstr "Grupo de usuario para aplicar permisos"
 
+msgid "Add a new permission."
+msgstr "Añadir un nuevo permiso."
+
 #, python-format
 msgid "Added permission \"%(value)s\""
 msgstr "Permiso agregado \"%(value)s\""
 
+msgid "Delete a permission."
+msgstr "Borrar un permiso."
+
 #, python-format
 msgid "Deleted permission \"%(value)s\""
 msgstr "Permiso borrado \"%(value)s\""
 
+msgid "Modify a permission."
+msgstr "Modificar un permiso."
+
 #, python-format
 msgid "Modified permission \"%(value)s\""
 msgstr "Modificado el permiso \"%(value)s\""
 
+msgid "Search for permissions."
+msgstr "Buscar permisos."
+
 #, python-format
 msgid "%(count)d permission matched"
 msgid_plural "%(count)d permissions matched"
 msgstr[0] "%(count)d permiso coincidente"
 msgstr[1] " %(count)d permisos coincidentes"
 
+msgid "Display information about a permission."
+msgstr "Mostrar información sobre un permiso."
+
+msgid "Ping a remote server."
+msgstr "Hacer ping a un servidor remoto."
+
 msgid ""
 "\n"
 "Kerberos pkinit options\n"
@@ -2950,6 +3826,9 @@ msgstr ""
 "http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n"
 "\n"
 
+msgid "pkinit"
+msgstr "pkinit"
+
 msgid "PKINIT"
 msgstr ""
 "    Los certificados de entrada deben estar codificados en DER. \n"
@@ -2958,6 +3837,9 @@ msgstr ""
 "    Unicode  se normalizan.\n"
 "    "
 
+msgid "Enable or Disable Anonymous PKINIT."
+msgstr "Habilitar o Deshabilitar PKINIT Anónimo."
+
 msgid ""
 "\n"
 "Privileges\n"
@@ -3000,9 +3882,18 @@ msgstr ""
 "\n"
 "\n"
 
+msgid "privilege"
+msgstr "privilegio"
+
+msgid "privileges"
+msgstr "privilegios"
+
 msgid "Privileges"
 msgstr "    Objeto de servicio."
 
+msgid "Privilege"
+msgstr "Privilegio"
+
 msgid "Privilege name"
 msgstr "    Añadir un nuevo servicio de la nueva IPA."
 
@@ -3011,27 +3902,51 @@ msgstr ""
 "    \n"
 "    Eliminar un servicio de la IPA."
 
+msgid "Add a new privilege."
+msgstr "Añadir un nuevo privilegio."
+
 #, python-format
 msgid "Added privilege \"%(value)s\""
 msgstr "Privilegio añadido \"%(value)s\""
 
+msgid "Delete a privilege."
+msgstr "Borrar un privilegio."
+
 #, python-format
 msgid "Deleted privilege \"%(value)s\""
 msgstr "Privilegio eliminado \"%(value)s \""
 
+msgid "Modify a privilege."
+msgstr "Modificar un privilegio."
+
 #, python-format
 msgid "Modified privilege \"%(value)s\""
 msgstr "Privilegio modificado \"%(value)s \""
 
+msgid "Search for privileges."
+msgstr "Buscar privilegios."
+
 #, python-format
 msgid "%(count)d privilege matched"
 msgid_plural "%(count)d privileges matched"
 msgstr[0] "%(count)d privilegio coincidente"
 msgstr[1] "%(count)d privilegios coincidentes"
 
+msgid "Display information about a privilege."
+msgstr "Mostrar información sobre un privilegio."
+
+msgid "Add members to a privilege."
+msgstr "Añadir miembros a un privilegio."
+
+msgid "Add permissions to a privilege."
+msgstr "Añadir permisos a un privilegio."
+
 msgid "Number of permissions added"
 msgstr "Número de permisos añadidos"
 
+msgid "Remove permissions from a privilege."
+msgstr "Borrar permisos de un privilegio."
+
 msgid "Number of permissions removed"
 msgstr "Número de permisos eliminados"
 
@@ -3127,6 +4042,12 @@ msgstr ""
 "la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado "
 "por %(gname)s)"
 
+msgid "password policy"
+msgstr "política de contraseña"
+
+msgid "password policies"
+msgstr "políticas de contraseña"
+
 msgid "Max failures"
 msgstr "Número máximo de fallas"
 
@@ -3145,6 +4066,9 @@ msgstr "Duración de bloqueo"
 msgid "Period for which lockout is enforced (seconds)"
 msgstr "Período durante el cual se fuerza el bloqueo (segundos)"
 
+msgid "Password Policies"
+msgstr "Políticas de Contraseña"
+
 msgid "Group"
 msgstr "Grupo"
 
@@ -3188,12 +4112,36 @@ msgstr ""
 msgid "Maximum password life must be greater than minimum."
 msgstr "La duración máxima de la contraseña debe ser mayor que la mínima."
 
+msgid "Add a new group password policy."
+msgstr "Añadir un nuevo grupo de política de contraseña."
+
+msgid "Delete a group password policy."
+msgstr "Borrar un grupo de política de contraseña."
+
+msgid "cannot delete global password policy"
+msgstr "no puede borrar la Política global de contraseña"
+
+msgid "Modify a group password policy."
+msgstr "Modificar un grupo de política de contraseña."
+
 msgid "priority cannot be set on global policy"
 msgstr "la prioridad no puede ser definida en una plítica global"
 
+msgid "Display information about password policy."
+msgstr "Mostrar información sobre la política de contraseña."
+
 msgid "Display effective policy for a specific user"
 msgstr "Ofrece la política efectiva para un determinado usuario"
 
+msgid "Search for group password policies."
+msgstr "Buscar grupo de políticas de contraseña."
+
+msgid "role"
+msgstr "rol"
+
+msgid "roles"
+msgstr "roles"
+
 msgid "Role"
 msgstr "Rol"
 
@@ -3203,57 +4151,117 @@ msgstr "Nombre de rol"
 msgid "A description of this role-group"
 msgstr "Una descripción de este grupo de roles"
 
+msgid "Add a new role."
+msgstr "Añadir un nuevo rol."
+
 #, python-format
 msgid "Added role \"%(value)s\""
 msgstr "Rol agregado \"%(value)s\""
 
+msgid "Delete a role."
+msgstr "Borrar un rol."
+
 #, python-format
 msgid "Deleted role \"%(value)s\""
 msgstr "Rol eliminado \"%(value)s\""
 
+msgid "Modify a role."
+msgstr "Modificar un rol."
+
 #, python-format
 msgid "Modified role \"%(value)s\""
 msgstr "Rol modificado \"%(value)s\""
 
+msgid "Search for roles."
+msgstr "Buscar roles."
+
 #, python-format
 msgid "%(count)d role matched"
 msgid_plural "%(count)d roles matched"
 msgstr[0] "%(count)d rol coincidente"
 msgstr[1] "%(count)d roles coincidentes"
 
+msgid "Display information about a role."
+msgstr "Mostrar información sobre un rol."
+
+msgid "Add members to a role."
+msgstr "Añadir miembros a un rol."
+
+msgid "Remove members from a role."
+msgstr "Borrar miembros de un rol."
+
+msgid "Add privileges to a role."
+msgstr "Añadir privilegios a un rol."
+
 msgid "Number of privileges added"
 msgstr "Número de privilegios agregados"
 
+msgid "Remove privileges from a role."
+msgstr "Borrar privilegios de un rol."
+
 msgid "Number of privileges removed"
 msgstr "Número de privilegios eliminados"
 
+msgid "self service permission"
+msgstr "auto servicio de permiso"
+
+msgid "self service permissions"
+msgstr "auto servicio de permisos"
+
 msgid "Self Service Permissions"
 msgstr "Permisos de autoservicio"
 
+msgid "Self Service Permission"
+msgstr "Auto Servicio de Permiso"
+
 msgid "Self-service name"
 msgstr "Auto-servicio de nombres"
 
+msgid "Add a new self-service permission."
+msgstr "Añadir un nuevo auto servicio de permiso."
+
 #, python-format
 msgid "Added selfservice \"%(value)s\""
 msgstr "Añadido autoservicio \"%(value)s\""
 
+msgid "Delete a self-service permission."
+msgstr "Borrar un auto servicio de permiso."
+
 #, python-format
 msgid "Deleted selfservice \"%(value)s\""
 msgstr "autoservicio eliminados \"%(value)s\""
 
+msgid "Modify a self-service permission."
+msgstr "Modificar un auto servicio de permiso."
+
 #, python-format
 msgid "Modified selfservice \"%(value)s\""
 msgstr "Autoservicio modificado \"%(value)s\""
 
+msgid "Search for a self-service permission."
+msgstr "Buscar un auto servicio de permiso."
+
 #, python-format
 msgid "%(count)d selfservice matched"
 msgid_plural "%(count)d selfservices matched"
 msgstr[0] "%(count)d autoservicio coincidente"
 msgstr[1] "%(count)d autoservicios coincidentes"
 
+msgid "Display information about a self-service permission."
+msgstr "Mostrar información sobre un auto servicio de permiso."
+
+msgid "service"
+msgstr "servicio"
+
+msgid "services"
+msgstr "servicios"
+
 msgid "Service principal"
 msgstr "    Búsqueda de servicios IPA"
 
+msgid "Add a new IPA new service."
+msgstr "Añadir un nuevo servicio nuevo IPA."
+
 #, python-format
 msgid "Added service \"%(value)s\""
 msgstr "Ha sido agregado el servicio \"%(value)s\""
@@ -3261,20 +4269,41 @@ msgstr "Ha sido agregado el servicio \"%(value)s\""
 msgid "force principal name even if not in DNS"
 msgstr "fuerza el nombre del prinicpal, aún si no se encuentra en DNS"
 
+msgid "Delete an IPA service."
+msgstr "Borrar un servicio IPA."
+
 #, python-format
 msgid "Deleted service \"%(value)s\""
 msgstr "Ha sido eliminado el servicio \"%(value)s\""
 
+msgid "Modify an existing IPA service."
+msgstr "Modificar un servicio IPA existente."
+
 #, python-format
 msgid "Modified service \"%(value)s\""
 msgstr "Ha sido modificado el servicio \"%(value)s\""
 
+msgid "Search for IPA services."
+msgstr "Buscar servicios IPA."
+
 #, python-format
 msgid "%(count)d service matched"
 msgid_plural "%(count)d services matched"
 msgstr[0] "%(count)d servicio coincidente"
 msgstr[1] "%(count)d servicios coincidentes\t\t\t"
 
+msgid "Display information about an IPA service."
+msgstr "Mostrar información sobre un servicio IPA."
+
+msgid "Add hosts that can manage this service."
+msgstr "Añadir hosts que pueden gestionar este servicio."
+
+msgid "Remove hosts that can manage this service."
+msgstr "Borrar hosts que puedan gestionar este servicio."
+
+msgid "Disable the Kerberos key and SSL certificate of a service."
+msgstr "Deshabilitar la clave Kerberos y el certificado SSL de un servicio."
+
 #, python-format
 msgid "Disabled service \"%(value)s\""
 msgstr "Servicio  inhabilitado \"%(value)s\""
@@ -3308,6 +4337,15 @@ msgstr ""
 "   ipa sudocmd-del /usr/bin/less\n"
 "\n"
 
+msgid "commands for controlling sudo configuration"
+msgstr "comandos para controlar la configuración sudo"
+
+msgid "sudo command"
+msgstr "comando sudo"
+
+msgid "sudo commands"
+msgstr "comandos sudo"
+
 msgid "Sudo Commands"
 msgstr "Comandos de sudo"
 
@@ -3317,9 +4355,102 @@ msgstr "Comando sudo "
 msgid "A description of this command"
 msgstr "Una descripción de este comando "
 
+msgid "Create new Sudo Command."
+msgstr "Crear un nuevo Comando Sudo."
+
+#, python-format
+msgid "Added Sudo Command \"%(value)s\""
+msgstr "Añadido Comando Sudo “%(value)s”"
+
+msgid "Delete Sudo Command."
+msgstr "Borrar Comando Sudo."
+
+#, python-format
+msgid "Deleted Sudo Command \"%(value)s\""
+msgstr "Borrado Comando Sudo “%(value)s”"
+
+msgid "Modify Sudo Command."
+msgstr "Modificar Comando Sudo."
+
+#, python-format
+msgid "Modified Sudo Command \"%(value)s\""
+msgstr "Modificado Comando Sudo “%(value)s”"
+
+msgid "Search for Sudo Commands."
+msgstr "Buscar Comandos Sudo."
+
+#, python-format
+msgid "%(count)d Sudo Command matched"
+msgid_plural "%(count)d Sudo Commands matched"
+msgstr[0] "%(count)d Comando Sudo emparejado"
+msgstr[1] "%(count)d Comandos Sudo emparejados"
+
+msgid "Display Sudo Command."
+msgstr "Mostrar Comando Sudo."
+
+msgid "sudo command group"
+msgstr "grupo de comando sudo"
+
+msgid "sudo command groups"
+msgstr "grupos de comando sudo"
+
 msgid "Sudo Command Group"
 msgstr "Grupo de comando sudo"
 
+msgid "Create new Sudo Command Group."
+msgstr "Crear un nuevo Grupo de Comando Sudo."
+
+#, python-format
+msgid "Added Sudo Command Group \"%(value)s\""
+msgstr "Añadido Grupo de Comando Sudo “%(value)s”"
+
+msgid "Delete Sudo Command Group."
+msgstr "Borrado Grupo de Comando Sudo."
+
+#, python-format
+msgid "Deleted Sudo Command Group \"%(value)s\""
+msgstr "Borrado Grupo de Comando Sudo “%(value)s”"
+
+msgid "Modify Sudo Command Group."
+msgstr "Modificar Grupo de Comando Sudo."
+
+#, python-format
+msgid "Modified Sudo Command Group \"%(value)s\""
+msgstr "Modificado Grupo de Comando Sudo “%(value)s”"
+
+msgid "Search for Sudo Command Groups."
+msgstr "Buscar Grupos de Comando Sudo."
+
+#, python-format
+msgid "%(count)d Sudo Command Group matched"
+msgid_plural "%(count)d Sudo Command Groups matched"
+msgstr[0] "%(count)d Grupo de Comando Sudo emparejado"
+msgstr[1] "%(count)d Grupos de Comando Sudo emparejados"
+
+msgid "Display Sudo Command Group."
+msgstr "Mostrar Grupo de Comando Sudo."
+
+msgid "Add members to Sudo Command Group."
+msgstr "Añadir miembros a Grupo de Comando Sudo."
+
+msgid "Remove members from Sudo Command Group."
+msgstr "Quitar miembros de un Grupo de Comando Sudo."
+
+msgid "Commands for controlling sudo configuration"
+msgstr "Comandos para controlar la configuración sudo"
+
+msgid "this option has been deprecated."
+msgstr "esta opción ha quedado obsoleta."
+
+msgid "sudo rule"
+msgstr "regla sudo"
+
+msgid "sudo rules"
+msgstr "reglas sudo"
+
+msgid "Sudo Rules"
+msgstr "Reglas Sudo"
+
 msgid "Sudo Rule"
 msgstr "Regla Sudo"
 
@@ -3329,27 +4460,164 @@ msgstr "Categoría de comandos"
 msgid "Command category the rule applies to"
 msgstr "Categoría de comandos la regla se aplica a"
 
+msgid "RunAs User category"
+msgstr "Categoría de Usuario RunAs"
+
+msgid "RunAs User category the rule applies to"
+msgstr "RunAs Usuario categoría la regla aplica a "
+
+msgid "RunAs Group category"
+msgstr "RunAs Grupo categoría"
+
+msgid "RunAs Group category the rule applies to"
+msgstr "RunAs Grupo categoría la regla aplica a"
+
 msgid "Sudo Allow Commands"
 msgstr "Comandos Allow de sudo"
 
 msgid "Sudo Deny Commands"
 msgstr "Comandos Deny de sudo"
 
+msgid "Sudo Allow Command Groups"
+msgstr "Sudo Permitir Grupos de Comando"
+
+msgid "Sudo Deny Command Groups"
+msgstr "Sudo Denegar Grupos de Comandos"
+
+msgid "RunAs Users"
+msgstr "RunAs Usuarios"
+
+msgid "Run as a user"
+msgstr "Ejecutar como un usuario"
+
+msgid "Groups of RunAs Users"
+msgstr "Grupos de Usuarios RunAs"
+
+msgid "Run as any user within a specified group"
+msgstr "Ejecutar como cualquier usuario dentro de un grupo especificado"
+
 msgid "External User"
 msgstr "De usuarios externos"
 
+msgid "External User the rule applies to (sudorule-find only)"
+msgstr "Usuario Externo la regla aplica a (sudorule-find sólo)"
+
 msgid "RunAs External User"
 msgstr "RunAs de usuarios externos"
 
+msgid "External User the commands can run as (sudorule-find only)"
+msgstr "Usuario Externo los comandos pueden correr como (sudorule-find sólo)"
+
 msgid "RunAs External Group"
 msgstr "Grupo externo RunAs"
 
+msgid "External Group the commands can run as (sudorule-find only)"
+msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)"
+
 msgid "Sudo Option"
 msgstr "Opción de sudo"
 
+msgid "RunAs Groups"
+msgstr "Grupos RunAs"
+
+msgid "Run with the gid of a specified POSIX group"
+msgstr "Ejecutar con la gid de un grupo POSIX especificado"
+
+msgid "Create new Sudo Rule."
+msgstr "Crear nueva Regla Sudo."
+
+#, python-format
+msgid "Added Sudo Rule \"%(value)s\""
+msgstr "Añadida Regla Sudo “%(value)s”"
+
+msgid "Delete Sudo Rule."
+msgstr "Borrar Regla Sudo."
+
+#, python-format
+msgid "Deleted Sudo Rule \"%(value)s\""
+msgstr "Borrada Regla Sudo “%(value)s”"
+
+msgid "Modify Sudo Rule."
+msgstr "Modificar Regla Sudo."
+
+#, python-format
+msgid "Modified Sudo Rule \"%(value)s\""
+msgstr "Regla Sudo Modificada “%(value)s”"
+
+msgid "Search for Sudo Rule."
+msgstr "Buscar Regla Sudo."
+
+#, python-format
+msgid "%(count)d Sudo Rule matched"
+msgid_plural "%(count)d Sudo Rules matched"
+msgstr[0] "%(count)d Regla Sudo emparejada"
+msgstr[1] "%(count)d Reglas Sudo emparejadas"
+
+msgid "Display Sudo Rule."
+msgstr "Mostrar Regla Sudo."
+
+msgid "Enable a Sudo Rule."
+msgstr "Habilitar Regla Sudo."
+
+#, python-format
+msgid "Enabled Sudo Rule \"%s\""
+msgstr "Regla Sudo Habilitada “%s”"
+
+msgid "Disable a Sudo Rule."
+msgstr "Deshabilitar Regla Sudo."
+
+#, python-format
+msgid "Disabled Sudo Rule \"%s\""
+msgstr "Regla Sudo Deshabilitada “%s”"
+
+msgid "Add commands and sudo command groups affected by Sudo Rule."
+msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo."
+
+msgid "Remove commands and sudo command groups affected by Sudo Rule."
+msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo."
+
+msgid "Add users and groups affected by Sudo Rule."
+msgstr "Añadir usuarios y grupos afectados por Regla Sudo."
+
+msgid "Remove users and groups affected by Sudo Rule."
+msgstr "Quitar usuarios y grupos afectados por Regla Sudo."
+
+msgid "Add hosts and hostgroups affected by Sudo Rule."
+msgstr "Añadir hosts y grupos de hosts afectados por Regla Sudo."
+
+msgid "Remove hosts and hostgroups affected by Sudo Rule."
+msgstr "Quitar hosts y grupos de hosts afectados por Regla Sudo."
+
+msgid "Add users and groups for Sudo to execute as."
+msgstr "Añadir usuarios y grupos para Sudo a ejecutar como."
+
+msgid "Remove users and groups for Sudo to execute as."
+msgstr "Quitar usuarios y grupos para Sudo a ejecutar como."
+
+msgid "Add group for Sudo to execute as."
+msgstr "Añadir grupo para Sudo a ejecutar como."
+
+msgid "Remove group for Sudo to execute as."
+msgstr "Quitar grupo para Sudo a ejecutar como."
+
+msgid "Add an option to the Sudo Rule."
+msgstr "Añadir una opción a la Regla Sudo."
+
+msgid "Remove an option from Sudo Rule."
+msgstr "Quitar una opción de la Regla Sudo."
+
 msgid "Realm name"
 msgstr "Nombre de reino "
 
+msgid "Kerberos keys available"
+msgstr "Claves Kerberos disponibles"
+
+msgid "user"
+msgstr "usuario"
+
+msgid "users"
+msgstr "usuarios"
+
 msgid "User login"
 msgstr "Ingreso de usuario"
 
@@ -3439,6 +4707,9 @@ msgstr "Cuenta inhabilitada "
 msgid "manager %(manager)s not found"
 msgstr "Administrador %(manager)s no encontrado"
 
+msgid "Add a new user."
+msgstr "Añadir un nuevo usuario."
+
 #, python-format
 msgid "Added user \"%(value)s\""
 msgstr "Ha sido agregado el usuario \"%(value)s\""
@@ -3450,14 +4721,23 @@ msgstr "No crear grupo privado de usuario"
 msgid "can be at most %(len)d characters"
 msgstr "puede ser a lo sumo%(len)d caracteres"
 
+msgid "Delete a user."
+msgstr "Borrar un usuario."
+
 #, python-format
 msgid "Deleted user \"%(value)s\""
 msgstr "Ha sido eliminado el usuario \"%(value)s\""
 
+msgid "Modify a user."
+msgstr "Modificar un usuario."
+
 #, python-format
 msgid "Modified user \"%(value)s\""
 msgstr "Ha sido modificado el usuario \"%(value)s\""
 
+msgid "Search for users."
+msgstr "Buscar usuarios."
+
 msgid "Self"
 msgstr "Self"
 
@@ -3470,14 +4750,43 @@ msgid_plural "%(count)d users matched"
 msgstr[0] "%(count)d usuario coincidente"
 msgstr[1] "%(count)d usuarios coincidentes"
 
+msgid "Display information about a user."
+msgstr "Mostrar información sobre un usuario."
+
+msgid "Disable a user account."
+msgstr "Deshabilitar una cuenta de usuario."
+
 #, python-format
 msgid "Disabled user account \"%(value)s\""
 msgstr " \"%(value)s\" de cuenta de usuario desactivada"
 
+msgid "Enable a user account."
+msgstr "Habilitar una cuenta de usuario."
+
 #, python-format
 msgid "Enabled user account \"%(value)s\""
 msgstr " \"%(value)s\" de cuenta de usuario activada"
 
+msgid ""
+"\n"
+"    Unlock a user account\n"
+"\n"
+"    An account may become locked if the password is entered incorrectly too\n"
+"    many times within a specific time period as controlled by password\n"
+"    policy. A locked account is a temporary condition and may be unlocked "
+"by\n"
+"    an administrator."
+msgstr ""
+"\n"
+"Desbloquear una cuenta de usuario\n"
+"\n"
+" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha "
+"introducido incorrectamente demasiadas\n"
+"veces dentro de un período de tiempo controlado por la política de\n"
+"contraseña. Una cuenta bloqueada es una condición temporal y puede ser "
+"desbloqueada por\n"
+"un administrador."
+
 #, python-format
 msgid "Unlocked account \"%(value)s\""
 msgstr "Cuenta desbloqueada \" %(value)s \""
@@ -3486,11 +4795,21 @@ msgstr "Cuenta desbloqueada \" %(value)s \""
 msgid "Permission denied: %(file)s"
 msgstr "Permiso denegado:%(file)s "
 
+msgid "cannot be longer that 255 characters"
+msgstr "no puede ser más larga de 255 caracteres"
+
+msgid "too many '@' characters"
+msgstr "demasiados ‘@’ caracteres"
+
 #, python-format
 msgid "Issuer \"%(issuer)s\" does not match the expected issuer"
 msgstr "Emisor \"%(issuer)s\" no coincide con el emisor esperado "
 
 #, python-format
+msgid "objectclass %s not found"
+msgstr "clase objeto %s no encontrada"
+
+#, python-format
 msgid "Unable to communicate with CMS (%s)"
 msgstr "No es posible comunicarse con CMS (%s)"
 
@@ -3506,27 +4825,6 @@ msgstr "Plataforma de hardware del equipo (p. ej. Lenovo T61)"
 msgid "Operating System and version of the host (e.g. Fedora 9)"
 msgstr "Sistema operativo que utiliza el equipo y versión (p.ej. Fedora 9)"
 
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"El asunto solicitado \"%(request_subject)s\" no coincide con la forma "
-"\"%(subject_base)s\""
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "no es posible decodificar csr: %s"
-
-msgid "file operation"
-msgstr "operación de archivo"
-
-msgid "cannot obtain next serial number"
-msgstr "no es posible obtener el próximo número de serie"
-
-msgid "certutil failure"
-msgstr "falla de Certutil"
-
 #, c-format
 msgid "cannot open configuration file %s\n"
 msgstr "no se puede abrir archivo de configuración %s\\n\n"
@@ -3564,6 +4862,10 @@ msgid "Unable to initialize ldap library!\n"
 msgstr "¡No puede iniciar biblioteca IDAP!\n"
 
 #, c-format
+msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n"
+msgstr "Incapaz de fijar LDAP_OPT_X_SASL_NOCANON \n"
+
+#, c-format
 msgid "Unable to set ldap options!\n"
 msgstr "¡No puede establecer opciones IDAP!\n"
 
@@ -3738,6 +5040,14 @@ msgid "No values for %s"
 msgstr "No hay valores para %s"
 
 #, c-format
+msgid "Search for IPA namingContext failed with error %d\n"
+msgstr "Búsqueda de IPA namingContext fallada con error %d \n"
+
+#, c-format
+msgid "IPA namingContext not found\n"
+msgstr "IPA namingContext no encontrado \n"
+
+#, c-format
 msgid "Out of memory!\n"
 msgstr "¡Memoria insuficiente!\n"
 
@@ -3758,6 +5068,10 @@ msgid "Unable to determine certificate subject of %s\n"
 msgstr "No se puede determinar asunto del certificado de%s\n"
 
 #, c-format
+msgid "Enrollment failed. %s\n"
+msgstr "Inscripción fallada. %s\n"
+
+#, c-format
 msgid "principal not found in XML-RPC response\n"
 msgstr "principales no se encuentran en respuesta XML-RPC\n"
 
@@ -3877,6 +5191,12 @@ msgstr "contraseña de LDAP (si no usa Kerberos)"
 msgid "password"
 msgstr "contraseña"
 
+msgid "LDAP basedn"
+msgstr "LDAP basedn"
+
+msgid "basedn"
+msgstr "basedn"
+
 #, c-format
 msgid "Unable to parse principal name\n"
 msgstr "No se puede analizar nombre principal\n"
diff --git a/install/po/eu.po b/install/po/eu.po
index ac95a7a67..8a95e5873 100644
--- a/install/po/eu.po
+++ b/install/po/eu.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Asier Iturralde Sarasola <asier.iturralde@gmail.com>, 2012.
+# Asier Iturralde Sarasola <asier.iturralde@gmail.com>, 2012
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Basque (http://www.transifex.com/projects/p/fedora/language/"
 "eu/)\n"
+"Language: eu\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: eu\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #, c-format
@@ -544,12 +544,6 @@ msgstr "\"%(value)s\" erabiltzailea ezabatuta"
 msgid "Modified user \"%(value)s\""
 msgstr "\"%(value)s\" erabiltzailea aldatuta"
 
-msgid "file operation"
-msgstr "fitxategi-eragiketa"
-
-msgid "cannot obtain next serial number"
-msgstr "ezin da hurrengo serie-zenbakia eskuratu"
-
 msgid "LDAP password"
 msgstr "LDAP pasahitza"
 
diff --git a/install/po/fr.po b/install/po/fr.po
index 841513038..89e5406de 100644
--- a/install/po/fr.po
+++ b/install/po/fr.po
@@ -3,23 +3,23 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Automatically generated, 2010.
-# Jérôme Fenal <jfenal@gmail.com>, 2011-2013.
-#   <jfenal@gmail.com>, 2011.
-# Petr Viktorin <encukou@gmail.com>, 2013.
+# Automatically generated, 2010
+# Jérôme Fenal <jfenal@gmail.com>, 2011-2013
+# Jérôme Fenal <jfenal@gmail.com>, 2011
+# Petr Viktorin <encukou@gmail.com>, 2013
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:38+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 15:45+0000\n"
 "Last-Translator: Jérôme Fenal <jfenal@gmail.com>\n"
 "Language-Team: French <trans-fr@lists.fedoraproject.org>\n"
+"Language: fr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: fr\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
 #, python-format
@@ -173,6 +173,10 @@ msgid "Could not get %(name)s interactively"
 msgstr "Impossible d'obtenir %(name)s de façon interactive"
 
 #, python-format
+msgid "Command '%(name)s' has been deprecated"
+msgstr "La commande « %(name)s » est maintenant obsolète."
+
+#, python-format
 msgid "%(reason)s"
 msgstr "%(reason)s"
 
@@ -513,6 +517,9 @@ msgstr "doit être une valeur parmi %(values)s"
 msgid "incomplete time value"
 msgstr "valeur de temps incomplète"
 
+msgid "this option is deprecated"
+msgstr "cette option est obsolète"
+
 msgid "A list of ACI values"
 msgstr "Une liste de valeurs d'ACI"
 
@@ -664,6 +671,189 @@ msgstr "Nouveau nom de l'ACI"
 msgid "Renamed ACI to \"%(value)s\""
 msgstr "ACI renommée en \"%(value)s\""
 
+msgid ""
+"\n"
+"Auto Membership Rule.\n"
+"\n"
+"Bring clarity to the membership of hosts and users by configuring inclusive\n"
+"or exclusive regex patterns, you can automatically assign a new entries "
+"into\n"
+"a group or hostgroup based upon attribute information.\n"
+"\n"
+"A rule is directly associated with a group by name, so you cannot create\n"
+"a rule without an accompanying group or hostgroup.\n"
+"\n"
+"A condition is a regular expression used by 389-ds to match a new incoming\n"
+"entry with an automember rule. If it matches an inclusive rule then the\n"
+"entry is added to the appropriate group or hostgroup.\n"
+"\n"
+"A default group or hostgroup could be specified for entries that do not\n"
+"match any rule. In case of user entries this group will be a fallback group\n"
+"because all users are by default members of group specified in IPA config.\n"
+"\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add the initial group or hostgroup:\n"
+"   ipa hostgroup-add --desc=\"Web Servers\" webservers\n"
+"   ipa group-add --desc=\"Developers\" devel\n"
+"\n"
+" Add the initial rule:\n"
+"   ipa automember-add --type=hostgroup webservers\n"
+"   ipa automember-add --type=group devel\n"
+"\n"
+" Add a condition to the rule:\n"
+"   ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-"
+"regex=^web[1-9]+\\.example\\.com webservers\n"
+"   ipa automember-add-condition --key=manager --type=group --inclusive-"
+"regex=^uid=mscott devel\n"
+"\n"
+" Add an exclusive condition to the rule to prevent auto assignment:\n"
+"   ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-"
+"regex=^web5\\.example\\.com webservers\n"
+"\n"
+" Add a host:\n"
+"    ipa host-add web1.example.com\n"
+"\n"
+" Add a user:\n"
+"    ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n"
+"\n"
+" Verify automembership:\n"
+"    ipa hostgroup-show webservers\n"
+"      Host-group: webservers\n"
+"      Description: Web Servers\n"
+"      Member hosts: web1.example.com\n"
+"\n"
+"    ipa group-show devel\n"
+"      Group name: devel\n"
+"      Description: Developers\n"
+"      GID: 1004200000\n"
+"      Member users: tuser\n"
+"\n"
+" Remove a condition from the rule:\n"
+"   ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-"
+"regex=^web[1-9]+\\.example\\.com webservers\n"
+"\n"
+" Modify the automember rule:\n"
+"    ipa automember-mod\n"
+"\n"
+" Set the default (fallback) target group:\n"
+"    ipa automember-default-group-set --default-group=webservers --"
+"type=hostgroup\n"
+"    ipa automember-default-group-set --default-group=ipausers --type=group\n"
+"\n"
+" Remove the default (fallback) target group:\n"
+"    ipa automember-default-group-remove --type=hostgroup\n"
+"    ipa automember-default-group-remove --type=group\n"
+"\n"
+" Show the default (fallback) target group:\n"
+"    ipa automember-default-group-show --type=hostgroup\n"
+"    ipa automember-default-group-show --type=group\n"
+"\n"
+" Find all of the automember rules:\n"
+"    ipa automember-find\n"
+"\n"
+" Display a automember rule:\n"
+"    ipa automember-show --type=hostgroup webservers\n"
+"    ipa automember-show --type=group devel\n"
+"\n"
+" Delete an automember rule:\n"
+"    ipa automember-del --type=hostgroup webservers\n"
+"    ipa automember-del --type=group devel\n"
+msgstr ""
+"\n"
+"Règle d'auto adhésion.\n"
+"\n"
+"Il est possible d'apporter de la clarté dans l'adhésion de systèmes ou\n"
+"d'utilisateurs en configurant des motifs d'expressions rationnelles "
+"inclusives\n"
+"ou exclusives, ce qui permet d'assigner de nouvelles entrées dans un groupe\n"
+"d'utilisateurs ou de systèmes sur la base d'informations dans les "
+"attributs.\n"
+"\n"
+"Une règle est directement associée avec un groupe par son nom, il est donc\n"
+"impossible de créer une règle sans le nom du groupe auquel elle est "
+"associée.\n"
+"\n"
+"Une condition est une expression rationnelle utilisée par 389-ds pour\n"
+"identifier les nouvelles entrées à utiliser dans la règle d'auto-adhésion.\n"
+"S'il y a correspondance avec une règle d'auto-adhésion, alors l'entrée\n"
+"est automatiquement ajoutée au groupe d'utilisateurs ou de systèmes.\n"
+"\n"
+"Un groupe ou un groupe de systèmes par défaut peut être spécifié pour les\n"
+"entrées qui ne correspondent à aucune règle. Dans le cas des entrées\n"
+"utilisateurs, ce groupe sera le groupe de repli car tous les utilisateurs\n"
+"sont par défaut membres d'un groupe spécifié dans la configuration IPA.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter le groupe d'utilisateurs ou de systèmes initial :\n"
+"   ipa hostgroup-add --desc=\"Web Servers\" webservers\n"
+"   ipa group-add --desc=\"Developers\" devel\n"
+"\n"
+" Créer la règle initiale :\n"
+"   ipa automember-add --type=hostgroup webservers\n"
+"   ipa automember-add --type=group devel\n"
+"\n"
+" Ajouter une condition à la règle :\n"
+"   ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-"
+"regex=^web[1-9]+\\\\.example\\\\.com webservers\n"
+"   ipa automember-add-condition --key=manager --type=group --inclusive-"
+"regex=^uid=mscott devel\n"
+"\n"
+" Ajouter une condition exclusive à la règle empêchant l'auto-adhésion :\n"
+"   ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-"
+"regex=^web5\\\\.example\\\\.com webservers\n"
+"\n"
+" Ajouter un système :\n"
+"    ipa host-add web1.example.com\n"
+"\n"
+" Ajouter un utilisateur :\n"
+"    ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n"
+"\n"
+" Vérifier l'auto-adhésion :\n"
+"    ipa hostgroup-show webservers\n"
+"      Host-group: webservers\n"
+"      Description: Web Servers\n"
+"      Member hosts: web1.example.com\n"
+"\n"
+"    ipa group-show devel\n"
+"      Group name: devel\n"
+"      Description: Developers\n"
+"      GID: 1004200000\n"
+"      Member users: tuser\n"
+"\n"
+" Supprimer une conditition de la règle :\n"
+"   ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-"
+"regex=^web[1-9]+\\.example\\.com webservers\n"
+"\n"
+" Modifier la règle d'auto-adhésion:\n"
+"    ipa automember-mod\n"
+"\n"
+" Définir le groupe cible (de repli) par défaut :\n"
+"    ipa automember-default-group-set --default-group=webservers --"
+"type=hostgroup\n"
+"    ipa automember-default-group-set --default-group=ipausers --type=group\n"
+"\n"
+" Supprimer le groupe cible (de repli) par défaut :\n"
+"    ipa automember-default-group-remove --type=hostgroup\n"
+"    ipa automember-default-group-remove --type=group\n"
+"\n"
+" Afficher le groupe cible (de repli) par défaut :\n"
+"    ipa automember-default-group-show --type=hostgroup\n"
+"    ipa automember-default-group-show --type=group\n"
+"\n"
+" Rechercher toutes les règles d'auto-adhésion :\n"
+"    ipa automember-find\n"
+"\n"
+" Afficher une règle d'auto-adhésion :\n"
+"    ipa automember-show --type=hostgroup webservers\n"
+"    ipa automember-show --type=group devel\n"
+"\n"
+" Supprimer une règle d'auto-adhésion :\n"
+"    ipa automember-del --type=hostgroup webservers\n"
+"    ipa automember-del --type=group devel\n"
+
 msgid "Inclusive Regex"
 msgstr "Regex inclusive"
 
@@ -859,8 +1049,8 @@ msgstr "Groupe par défaut (de repli) où les entrées seront visibles"
 #, python-format
 msgid "Set default (fallback) group for automember \"%(value)s\""
 msgstr ""
-"Groupe par défaut (de repli) défini pour l'appartenance automatique « "
-"%(value)s »"
+"Groupe par défaut (de repli) défini pour l'appartenance automatique "
+"« %(value)s »"
 
 msgid ""
 "\n"
@@ -2041,6 +2231,66 @@ msgstr "La carte des utilisateurs par défaut n'est pas une liste ordonnée"
 msgid "Show the current configuration."
 msgstr "Afficher la configuration actuelle."
 
+msgid ""
+"\n"
+"Group to Group Delegation\n"
+"\n"
+"A permission enables fine-grained delegation of permissions. Access Control\n"
+"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
+"given tasks such as adding a user, modifying a group, etc.\n"
+"\n"
+"Group to Group Delegations grants the members of one group to update a set\n"
+"of attributes of members of another group.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a delegation rule to allow managers to edit employee's addresses:\n"
+"   ipa delegation-add --attrs=street --group=managers --"
+"membergroup=employees \"managers edit employees' street\"\n"
+"\n"
+" When managing the list of attributes you need to include all attributes\n"
+" in the list, including existing ones. Add postalCode to the list:\n"
+"   ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --"
+"membergroup=employees \"managers edit employees' street\"\n"
+"\n"
+" Display our updated rule:\n"
+"   ipa delegation-show \"managers edit employees' street\"\n"
+"\n"
+" Delete a rule:\n"
+"   ipa delegation-del \"managers edit employees' street\"\n"
+msgstr ""
+"\n"
+"Délégation de groupe à groupe\n"
+"\n"
+"Une permission permet une délégation fine des autorisations. Les règles de\n"
+"contrôle d'accès, ou les instructions (ACI), accordent la possibilité aux\n"
+"permissions de réaliser certaines tâches comme l'ajout d'utilisateur, la\n"
+"modification d'un groupe, etc.\n"
+"\n"
+"La délégation de groupe à groupe permet aux membres d'un groupe de modifier\n"
+"un jeu d'attributs de membres d'un autre groupe.\n"
+"\n"
+"EXEMPLES:\n"
+"\n"
+" Ajouter une règle de délégation permettant aux managers de modifier\n"
+" les adresses des employés :\n"
+"   ipa delegation-add --attrs=street --group=managers --"
+"membergroup=employees 'les managers modifient les adresses des employés'\n"
+"\n"
+"\n"
+" Lors de la gestion d'une liste d'attributs, vous devez toujours spécifier\n"
+" la liste complète des attributs, y compris les attributs existants.\n"
+" Ajouter postalCode à la liste :\n"
+"   ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --"
+"membergroup=employees 'les managers modifient les adresses des employés'\n"
+"\n"
+"\n"
+" Afficher la règle modifiée :\n"
+"   ipa delegation-show 'les managers modifient les adresses des employés'\n"
+"\n"
+" Supprimer une règle :\n"
+"   ipa delegation-del 'les managers modifient les adresses des employés'\n"
+
 msgid "delegation"
 msgstr "délégation"
 
@@ -2101,6 +2351,444 @@ msgstr[1] "%(count)d délégations correspondantes"
 msgid "Display information about a delegation."
 msgstr "Afficher les informations sur une délégation."
 
+msgid ""
+"\n"
+"Domain Name System (DNS)\n"
+"\n"
+"Manage DNS zone and resource records.\n"
+"\n"
+"\n"
+"USING STRUCTURED PER-TYPE OPTIONS\n"
+"\n"
+"There are many structured DNS RR types where DNS data stored in LDAP server\n"
+"is not just a scalar value, for example an IP address or a domain name, but\n"
+"a data structure which may be often complex. A good example is a LOC record\n"
+"[RFC1876] which consists of many mandatory and optional parts (degrees,\n"
+"minutes, seconds of latitude and longitude, altitude or precision).\n"
+"\n"
+"It may be difficult to manipulate such DNS records without making a mistake\n"
+"and entering an invalid value. DNS module provides an abstraction over "
+"these\n"
+"raw records and allows to manipulate each RR type with specific options. "
+"For\n"
+"each supported RR type, DNS module provides a standard option to manipulate\n"
+"a raw records with format --<rrtype>-rec, e.g. --mx-rec, and special "
+"options\n"
+"for every part of the RR structure with format --<rrtype>-<partname>, e.g.\n"
+"--mx-preference and --mx-exchanger.\n"
+"\n"
+"When adding a record, either RR specific options or standard option for a "
+"raw\n"
+"value can be used, they just should not be combined in one add operation. "
+"When\n"
+"modifying an existing entry, new RR specific options can be used to change\n"
+"one part of a DNS record, where the standard option for raw value is used\n"
+"to specify the modified value. The following example demonstrates\n"
+"a modification of MX record preference from 0 to 1 in a record without\n"
+"modifying the exchanger:\n"
+"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n"
+"\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add new zone:\n"
+"   ipa dnszone-add example.com --name-server=ns \\\n"
+"                               --admin-email=admin@example.com \\\n"
+"                               --ip-address=10.0.0.1\n"
+"\n"
+" Add system permission that can be used for per-zone privilege delegation:\n"
+"   ipa dnszone-add-permission example.com\n"
+"\n"
+" Modify the zone to allow dynamic updates for hosts own records in realm "
+"EXAMPLE.COM:\n"
+"   ipa dnszone-mod example.com --dynamic-update=TRUE\n"
+"\n"
+"   This is the equivalent of:\n"
+"     ipa dnszone-mod example.com --dynamic-update=TRUE \\\n"
+"      --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM "
+"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n"
+"\n"
+" Modify the zone to allow zone transfers for local network only:\n"
+"   ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n"
+"\n"
+" Add new reverse zone specified by network IP address:\n"
+"   ipa dnszone-add --name-from-ip=80.142.15.0/24 \\\n"
+"                   --name-server=ns.example.com.\n"
+"\n"
+" Add second nameserver for example.com:\n"
+"   ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n"
+"\n"
+" Add a mail server for example.com:\n"
+"   ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n"
+"\n"
+" Add another record using MX record specific options:\n"
+"  ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n"
+"\n"
+" Add another record using interactive mode (started when dnsrecord-add, "
+"dnsrecord-mod,\n"
+" or dnsrecord-del are executed with no options):\n"
+"  ipa dnsrecord-add example.com @\n"
+"  Please choose a type of DNS resource record to be added\n"
+"  The most common types for this type of zone are: NS, MX, LOC\n"
+"\n"
+"  DNS resource record type: MX\n"
+"  MX Preference: 30\n"
+"  MX Exchanger: mail3\n"
+"    Record name: example.com\n"
+"    MX record: 10 mail1, 20 mail2, 30 mail3\n"
+"    NS record: nameserver.example.com., nameserver2.example.com.\n"
+"\n"
+" Delete previously added nameserver from example.com:\n"
+"   ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n"
+"\n"
+" Add LOC record for example.com:\n"
+"   ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E "
+"227.64m\"\n"
+"\n"
+" Add new A record for www.example.com. Create a reverse record in "
+"appropriate\n"
+" reverse zone as well. In this case a PTR record \"2\" pointing to www."
+"example.com\n"
+" will be created in zone 15.142.80.in-addr.arpa.\n"
+"   ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n"
+"\n"
+" Add new PTR record for www.example.com\n"
+"   ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n"
+"\n"
+" Add new SRV records for LDAP servers. Three quarters of the requests\n"
+" should go to fast.example.com, one quarter to slow.example.com. If neither\n"
+" is available, switch to backup.example.com.\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example."
+"com\"\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example."
+"com\"\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup."
+"example.com\"\n"
+"\n"
+" The interactive mode can be used for easy modification:\n"
+"  ipa dnsrecord-mod example.com _ldap._tcp\n"
+"  No option to modify specific record provided.\n"
+"  Current DNS record contents:\n"
+"\n"
+"  SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 "
+"backup.example.com\n"
+"\n"
+"  Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n"
+"  Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n"
+"  SRV Priority [0]:                     (keep the default value)\n"
+"  SRV Weight [1]: 2                     (modified value)\n"
+"  SRV Port [389]:                       (keep the default value)\n"
+"  SRV Target [slow.example.com]:        (keep the default value)\n"
+"  1 SRV record skipped. Only one value per DNS record type can be modified "
+"at one time.\n"
+"    Record name: _ldap._tcp\n"
+"    SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 "
+"389 slow.example.com\n"
+"\n"
+" After this modification, three fifths of the requests should go to\n"
+" fast.example.com and two fifths to slow.example.com.\n"
+"\n"
+" An example of the interactive mode for dnsrecord-del command:\n"
+"   ipa dnsrecord-del example.com www\n"
+"   No option to delete specific record provided.\n"
+"   Delete all? Yes/No (default No):     (do not delete all records)\n"
+"   Current DNS record contents:\n"
+"\n"
+"   A record: 1.2.3.4, 11.22.33.44\n"
+"\n"
+"   Delete A record '1.2.3.4'? Yes/No (default No):\n"
+"   Delete A record '11.22.33.44'? Yes/No (default No): y\n"
+"     Record name: www\n"
+"     A record: 1.2.3.4                  (A record 11.22.33.44 has been "
+"deleted)\n"
+"\n"
+" Show zone example.com:\n"
+"   ipa dnszone-show example.com\n"
+"\n"
+" Find zone with \"example\" in its domain name:\n"
+"   ipa dnszone-find example\n"
+"\n"
+" Find records for resources with \"www\" in their name in zone example.com:\n"
+"   ipa dnsrecord-find example.com www\n"
+"\n"
+" Find A records with value 10.10.0.1 in zone example.com\n"
+"   ipa dnsrecord-find example.com --a-rec=10.10.0.1\n"
+"\n"
+" Show records for resource www in zone example.com\n"
+"   ipa dnsrecord-show example.com www\n"
+"\n"
+" Delegate zone sub.example to another nameserver:\n"
+"   ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n"
+"   ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n"
+"\n"
+" If global forwarder is configured, all requests to sub.example.com will be\n"
+" routed through the global forwarder. To change the behavior for example."
+"com\n"
+" zone only and forward the request directly to ns.sub.example.com., global\n"
+" forwarding may be disabled per-zone:\n"
+"   ipa dnszone-mod example.com --forward-policy=none\n"
+"\n"
+" Forward all requests for the zone external.com to another nameserver using\n"
+" a \"first\" policy (it will send the queries to the selected forwarder and "
+"if\n"
+" not answered it will use global resolvers):\n"
+"   ipa dnszone-add external.com\n"
+"   ipa dnszone-mod external.com --forwarder=10.20.0.1 \\\n"
+"                                --forward-policy=first\n"
+"\n"
+" Delete zone example.com with all resource records:\n"
+"   ipa dnszone-del example.com\n"
+"\n"
+" Resolve a host name to see if it exists (will add default IPA domain\n"
+" if one is not included):\n"
+"   ipa dns-resolve www.example.com\n"
+"   ipa dns-resolve www\n"
+"\n"
+"\n"
+"GLOBAL DNS CONFIGURATION\n"
+"\n"
+"DNS configuration passed to command line install script is stored in a "
+"local\n"
+"configuration file on each IPA server where DNS service is configured. "
+"These\n"
+"local settings can be overridden with a common configuration stored in LDAP\n"
+"server:\n"
+"\n"
+" Show global DNS configuration:\n"
+"   ipa dnsconfig-show\n"
+"\n"
+" Modify global DNS configuration and set a list of global forwarders:\n"
+"   ipa dnsconfig-mod --forwarder=10.0.0.1\n"
+msgstr ""
+"\n"
+"Domain Name System (DNS)\n"
+"\n"
+"Gestion des zones DNS et des enregistrements de ressource.\n"
+"\n"
+"UTILISATION D'OPTIONS STRUCTURÉES PAR TYPE\n"
+"\n"
+"Il existe de nombreux types structurés de RR DNS où les données DNS "
+"stockées\n"
+"dans le serveur LDAP ne sont pas seulement des valeurs scalaires, par "
+"exemple\n"
+"une adresse IP ou un nom de domaine, mais une structure de données qui "
+"peut \n"
+"être souvent complexe. Un bon exemple est un enregistrement LOC [RFC1876] "
+"qui \n"
+"se compose de plusieurs parties obligatoires et facultatives (degrés, "
+"minutes,\n"
+"secondes de latitude et de longitude, altitude ou précision).\n"
+"\n"
+"Il peut être difficile de manipuler ces enregistrements DNS sans se tromper\n"
+"et entrer une valeur invalide. Le module DNS fournit une abstraction sur "
+"ces\n"
+"enregistrements bruts et permet de manipuler chaque type RR avec des "
+"options \n"
+"spécifiques. Pour chaque type RR pris en charge, le module DNS fournit une \n"
+"option standard pour manipuler les enregistrements bruts avec un format\n"
+"--<rrtype>-rec, par exemple --mx-rec, ainsi que des options spéciales\n"
+"pour chaque partie de la structure RR avec le format --<rrtype>-<partname>,\n"
+"par exemple, --mx-preference and --mx-exchanger.\n"
+"\n"
+"Lors de l'ajout d'un enregistrement, les options standards ou les options\n"
+"spécifiques peuvent au choix être utilisées, mais ne peuvent être combinées\n"
+"au sein de la même commande. Lors de la modification d'une entrée "
+"existante,\n"
+"de nouvelles options spécifiques RR peuvent être utilisés pour changer une \n"
+"partie d'un enregistrement DNS, où l'option standard pour la valeur brute "
+"est\n"
+"utilisée pour spécifier la valeur modifiée. L'exemple suivant montre une \n"
+"modification de la préférence du MX de 0 à 1 dans un enregistrement\n"
+"existant, sans modifier le MX lui-même :\n"
+"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n"
+"\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter une nouvelle zone :\n"
+"   ipa dnszone-add example.com --name-server=ns \\\n"
+"                               --admin-email=admin@example.com \\\n"
+"                               --ip-address=10.0.0.1\n"
+" Ajouter une permission ssytème afin de pouvoir utiliser la délégation\n"
+" de privilège par zone :\n"
+"   ipa dnszone-add-permission example.com\n"
+"\n"
+" Modifier la zone pour permettre les mises à jour dynamiques des\n"
+" enregistrements des systèmes du domaine EXAMPLE.COM :\n"
+"   ipa dnszone-mod example.com --dynamic-update=TRUE\n"
+"\n"
+" Ceci est l'équivalent de :\n"
+"   ipa dnszone-mod example.com --dynamic-update=TRUE \\\n"
+"      --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM "
+"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n"
+"\n"
+" Modifier la zone afin de permettre les transferts de zone pour les réseaux\n"
+" locaux uniquement :\n"
+"   ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n"
+"\n"
+" Ajouter une nouvelle zone inverse spécifiée par son adresse de réseau :\n"
+"   ipa dnszone-add --name-from-ip=80.142.15.0/24 \\\n"
+"                   --name-server=ns.example.com.\n"
+"\n"
+" Ajouter un second serveur de nom pour example.com:\n"
+"   ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n"
+"\n"
+" Ajouter un serveur de messagerie pour example.com:\n"
+"   ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n"
+"\n"
+" Ajouter un nouvel enregistrement avec les options spécifiques MX :\n"
+"  ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n"
+"\n"
+" Ajouter un nouvel enregistrement grâce au mode interactif (lancé lorsque "
+"dnsrecord-add,\n"
+" dnsrecord-mod ou dnsrecord-del sont exécutés sans options) :\n"
+"  ipa dnsrecord-add example.com @\n"
+"  Merci de choisir un type de ressource DNS pour l'enregistrement à "
+"ajouter.\n"
+"  Les types les plus courants pour ce type de zone sont : NS, MX, LOC\n"
+"\n"
+"  Type de ressource d'enregistrement DNS : MX\n"
+"  Préférence MX : 30\n"
+"  Échangeur MX : mail3\n"
+"    Nom d'enregistrement : example.com\n"
+"    Enregistrement MX : 10 mail1, 20 mail2, 30 mail3\n"
+"    Enregistrement NS : nameserver.example.com., nameserver2.example.com.\n"
+"\n"
+" Supprimer un serveur de nom précédemment défini pour example.com:\n"
+"   ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n"
+"\n"
+" Ajouter un enregistrement LOC pour example.com:\n"
+"   ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E "
+"227.64m\"\n"
+"\n"
+" Ajouter un nouvel enregistrement A pour www.example.com. Créer aussi un\n"
+" enregistrement inverse. Dans ce cas, un enregistrement PTR « 2 » pointant\n"
+" vers www.example.com sera créé dans la zone 15.142.80.in-addr.arpa.\n"
+"   ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n"
+"\n"
+" Ajouter un nouvel enregistrement PTR pour www.example.com\n"
+"   ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n"
+"\n"
+" Ajouter de nouveaux enregistrement SRV pour les serveurs LDAP. Les trois "
+"quarts\n"
+" des requêtes doivent aller sur fast.example.com, un quart sur slow.example."
+"com.\n"
+" Si aucune n'est disponible, basculer sur backup.example.com.\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example."
+"com\"\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example."
+"com\"\n"
+"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup."
+"example.com\"\n"
+"\n"
+" Le mode interactif peut être utilisé pour faciliter les modifications :\n"
+"  ipa dnsrecord-mod example.com _ldap._tcp\n"
+"  Aucune option spécifiées pour modifier l'enregistrement demandé.\n"
+"  Contenu actuel de l'enregistrement DNS :\n"
+"\n"
+"  Enregistrement SRV : 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 "
+"1 389 backup.example.com\n"
+"\n"
+"  Modifier l'enregistrement SRV '0 3 389 fast.example.com'? Oui/Non (par "
+"défaut Non): \n"
+"  Modifier l'enregistrement SRV '0 1 389 slow.example.com'? Oui/Non (Par "
+"défaut Non): o\n"
+"  Priorité SRV [0]:                     (garder la valeur par défaut)\n"
+"  Poids SRV [1]: 2                      (modifier la valeur)\n"
+"  Port SRV [389]:                       (garder la valeur par défaut)\n"
+"  Cible SRV [slow.example.com]:         (garder la valeur par défaut)\n"
+"  1 enregistrement SRV sauté. Seule une valeur par enregistrement DNS peut "
+"être modifié un instant donné.\n"
+"    Nom d'enregistrement : _ldap._tcp\n"
+"    Enregistrement SRV : 0 3 389 fast.example.com, 1 1 389 backup.example."
+"com, 0 2 389 slow.example.com\n"
+"\n"
+" Après cette modification, trois cinquièmes des requêtes devraient aller "
+"sur\n"
+" fast.example.com et deux cinquièmes sur slow.example.com.\n"
+"\n"
+" Un exemple d'utilisation du mode interactif pour la commande dnsrecord-"
+"del :\n"
+"   ipa dnsrecord-del example.com www\n"
+"   Pas d'option fournie pour supprimer un enregistrement spécifique.\n"
+"   Tout supprimer ? Oui/Non (Défault: Non):     (ne pas détruire tous les "
+"enregistrements)\n"
+"   Contenu actuel de l'enregistrement DNS :\n"
+"\n"
+"   Enregistrement A : 1.2.3.4, 11.22.33.44\n"
+"\n"
+"   Supprimer l'enregistrement A '1.2.3.4'? Oui/Non (par défaut: Non): \n"
+"   Supprimer l'enregistrement A '11.22.33.44'? Oui/Non (par défaut: Non): o\n"
+"     Nom de l'enregistrement : www\n"
+"     Enregistrement A : 1.2.3.4                  (Enregistrement A "
+"11.22.33.44 a été supprimé)\n"
+"\n"
+" Afficher la zone example.com :\n"
+"   ipa dnszone-show example.com\n"
+"\n"
+" Chercher les zones contenant \"example\" dans le nom de domaine :\n"
+"   ipa dnszone-find example\n"
+"\n"
+" Chercher les enregistrements pour les ressources dont le nom contient \"www"
+"\" dans la zone example.com :\n"
+"   ipa dnsrecord-find example.com www\n"
+"\n"
+" Chercher les enregistrements A de valeur 10.10.0.1 dans la zone example."
+"com\n"
+"   ipa dnsrecord-find example.com --a-rec=10.10.0.1\n"
+"\n"
+" Afficher les enregistrements pour la ressource www dans la zone example."
+"com\n"
+"   ipa dnsrecord-show example.com www\n"
+"\n"
+" Déléguer la zone sub.example à un autre serveur de noms :\n"
+"   ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n"
+"   ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n"
+"\n"
+" Si un fournisseur global est configuré, toutes les requêtes à sub.example."
+"com\n"
+" seront routées vers le fournisseur global. Pour modifier le comportement "
+"pour\n"
+" la zone example.com uniquement et transférer les requêtes directement à\n"
+" ns.sub.example.com., la transmission globale peut être désactivée zone par "
+"zone :\n"
+"   ipa dnszone-mod example.com --forward-policy=none\n"
+"\n"
+" Transmet toutes les requêtes pour la zone external.com vers un autre "
+"serveur de\n"
+" noms primant (first) sur le global (il envoie les requêtes au fournisseur \n"
+" sélectionné, et s'il n'a pas de réponse, utilise le transmetteur global) :\n"
+"   ipa dnszone-add external.com\n"
+"   ipa dnszone-mod external.com --forwarder=10.20.0.1 \\\n"
+"                                --forward-policy=first\n"
+"\n"
+" Supprimer la zone example.com avec toutes ses ressources :\n"
+"   ipa dnszone-del example.com\n"
+"\n"
+" Résoudre un nom de système afin de vérifier son existence (ajout "
+"automatique du nom de domaine IPA\n"
+" si non spécifié) :\n"
+"   ipa dns-resolve www.example.com\n"
+"   ipa dns-resolve www\n"
+"\n"
+"\n"
+"CONFIGURATION DNS GLOBALE\n"
+"\n"
+"La configuration DNS passée au script d'installation en ligne de commande "
+"est \n"
+"stockée dans un fichier de configuration local sur chaque serveur IPA lors "
+"de \n"
+"la configuration du service DNS. Cette configuration locale peut être "
+"surchargée\n"
+"par une configuration stockée dans l'annuaire LDAP :\n"
+"\n"
+" Afficher la configuration DNS globale :\n"
+"   ipa dnsconfig-show\n"
+"\n"
+" Modifier la configuration DNS globale et définit une liste de transmetteurs "
+"globaux :\n"
+"   ipa dnsconfig-mod --forwarder=10.0.0.1\n"
+
 #, python-format
 msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!"
 msgstr ""
@@ -3171,6 +3859,108 @@ msgstr "interdit de modifier les entrées de groupe"
 msgid "Not a managed group"
 msgstr "Pas un groupe administré"
 
+msgid ""
+"\n"
+"Host-based access control\n"
+"\n"
+"Control who can access what services on what hosts. You\n"
+"can use HBAC to control which users or groups can\n"
+"access a service, or group of services, on a target host.\n"
+"\n"
+"You can also specify a category of users and target hosts.\n"
+"This is currently limited to \"all\", but might be expanded in the\n"
+"future.\n"
+"\n"
+"Target hosts in HBAC rules must be hosts managed by IPA.\n"
+"\n"
+"The available services and groups of services are controlled by the\n"
+"hbacsvc and hbacsvcgroup plug-ins respectively.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Create a rule, \"test1\", that grants all users access to the host \"server"
+"\" from\n"
+" anywhere:\n"
+"   ipa hbacrule-add --usercat=all test1\n"
+"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
+"\n"
+" Display the properties of a named HBAC rule:\n"
+"   ipa hbacrule-show test1\n"
+"\n"
+" Create a rule for a specific service. This lets the user john access\n"
+" the sshd service on any machine from any machine:\n"
+"   ipa hbacrule-add --hostcat=all john_sshd\n"
+"   ipa hbacrule-add-user --users=john john_sshd\n"
+"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
+"\n"
+" Create a rule for a new service group. This lets the user john access\n"
+" the FTP service on any machine from any machine:\n"
+"   ipa hbacsvcgroup-add ftpers\n"
+"   ipa hbacsvc-add sftp\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
+"   ipa hbacrule-add --hostcat=all john_ftp\n"
+"   ipa hbacrule-add-user --users=john john_ftp\n"
+"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
+"\n"
+" Disable a named HBAC rule:\n"
+"   ipa hbacrule-disable test1\n"
+"\n"
+" Remove a named HBAC rule:\n"
+"   ipa hbacrule-del allow_server\n"
+msgstr ""
+"\n"
+"Contrôle d'accès des systèmes (HBAC)\n"
+"\n"
+"HBAC (Host-based acces control) permet de contrôler qui peut accéder\n"
+"à quels services sur quels systèmes, et d'où. Il est possible\n"
+"d'utiliser le système HBAC afin de contrôler quels utilisateurs ou\n"
+"groupes d'un système source peuvent accéder quels services, ou groupes\n"
+"de services, sur un système cible.\n"
+"\n"
+"Vous pouvez aussi spécifier une catégorie d'utilisateur, de systèmes\n"
+"cibles et de systèmes sources. La seule catégorie existante pour le\n"
+"moment est \"all\", mais pourra être étendu dans le futur.\n"
+"\n"
+"Les systèmes sources et cibles des règles HBAC doivent être des systèmes\n"
+"administrés par IPA.\n"
+"\n"
+"Les services et groupes de services disponibles sont gérés respectivement\n"
+"par les greffons hbacsvc and hbacsvcgroup.\n"
+"\n"
+"EXEMPLES:\n"
+"\n"
+" Créer une règle \"test1\" autorisant tous les utilisateurs à accéder\n"
+" le serveur « server » depuis n'importe où :\n"
+"   ipa hbacrule-add --usercat=all test1\n"
+"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
+"\n"
+" Afficher les propriétés d'une règle HBAC nommée :\n"
+"   ipa hbacrule-show test1\n"
+"\n"
+" Créer une règle pour un service spécifique, permettant à\n"
+" l'utilisateur john d'accéder au service sshd sur toute machine depuis\n"
+" n'importe quelle machine :\n"
+"   ipa hbacrule-add --hostcat=all john_sshd\n"
+"   ipa hbacrule-add-user --users=john john_sshd\n"
+"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
+"\n"
+" Créer une règle pour un nouveau groupe de services, permettant à\n"
+" l'utilisateur john d'accéder au service FTP de toute machine depuis\n"
+" n'importe quelle machine.\n"
+"   ipa hbacsvcgroup-add ftpers\n"
+"   ipa hbacsvc-add sftp\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
+"   ipa hbacrule-add --hostcat=all john_ftp\n"
+"   ipa hbacrule-add-user --users=john john_ftp\n"
+"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
+"\n"
+" Désactiver une règle HBAC nommée :\n"
+"   ipa hbacrule-disable test1\n"
+"\n"
+" Supprimer une règle HBAC nommée :\n"
+"   ipa hbacrule-del allow_server\n"
+"\n"
+
 msgid "Host-based access control commands"
 msgstr "Commandes de contrôle d'accès des systèmes"
 
@@ -3431,6 +4221,48 @@ msgstr[1] "%(count)d services HBAC correspondants"
 msgid "Display information about an HBAC service."
 msgstr "Afficher les informations sur un service HBAC."
 
+msgid ""
+"\n"
+"HBAC Service Groups\n"
+"\n"
+"HBAC service groups can contain any number of individual services,\n"
+"or \"members\". Every group must have a description.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a new HBAC service group:\n"
+"   ipa hbacsvcgroup-add --desc=\"login services\" login\n"
+"\n"
+" Add members to an HBAC service group:\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n"
+"\n"
+" Display information about a named group:\n"
+"   ipa hbacsvcgroup-show login\n"
+"\n"
+" Delete an HBAC service group:\n"
+"   ipa hbacsvcgroup-del login\n"
+msgstr ""
+"\n"
+"Groupes de services HBAC\n"
+"\n"
+"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n"
+"services individuels, dit « membres ». Chaque groupe doit avoir une\n"
+"description.\n"
+"\n"
+"EXEMPLES:\n"
+"\n"
+" Ajouter un nouveau groupe de services HBAC :\n"
+"   ipa hbacsvcgroup-add --desc=\"login services\" login\n"
+"\n"
+" Ajouter des membres à un groupe de services HBAC :\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n"
+"\n"
+" Afficher les informations d'un groupe nommé :\n"
+"   ipa hbacsvcgroup-show login\n"
+"\n"
+" Supprimer un groupe de services HBAC :\n"
+"   ipa hbacsvcgroup-del login\n"
+
 msgid "HBAC service group"
 msgstr "Groupe de services HBAC"
 
@@ -3738,6 +4570,12 @@ msgstr "Adresse(s) MAC du matériel sur ce serveur"
 msgid "SSH public key"
 msgstr "Clé publique SSH"
 
+msgid ""
+"Host category (semantics placed on this attribute are for local "
+"interpretation)"
+msgstr ""
+"Catégorie d'hôte (les sémantiques associées à cet attribut vous sont propres)"
+
 msgid "Add a new host."
 msgstr "Ajouter un nouveau système."
 
@@ -3821,6 +4659,65 @@ msgstr "Ajouter les systèmes qui peuvent gérer ce système."
 msgid "Remove hosts that can manage this host."
 msgstr "Supprimer les systèmes qui peuvent gérer ce système."
 
+msgid ""
+"\n"
+"Groups of hosts.\n"
+"\n"
+"Manage groups of hosts. This is useful for applying access control to a\n"
+"number of hosts by using Host-based Access Control.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a new host group:\n"
+"   ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n"
+"\n"
+" Add another new host group:\n"
+"   ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n"
+"\n"
+" Add members to the hostgroup (using Bash brace expansion):\n"
+"   ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n"
+"\n"
+" Add a hostgroup as a member of another hostgroup:\n"
+"   ipa hostgroup-add-member --hostgroups=baltimore maryland\n"
+"\n"
+" Remove a host from the hostgroup:\n"
+"   ipa hostgroup-remove-member --hosts=box2 baltimore\n"
+"\n"
+" Display a host group:\n"
+"   ipa hostgroup-show baltimore\n"
+"\n"
+" Delete a hostgroup:\n"
+"   ipa hostgroup-del baltimore\n"
+msgstr ""
+"\n"
+"Groupes de systèmes.\n"
+"\n"
+"Gestion des groupes de systèmes. Permet d'appliquer des contrôles d'accès\n"
+"à plusieurs systèmes en utilisant les contrôles HBAC.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter un nouveau groupe de systèmes :\n"
+"   ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n"
+"\n"
+" Ajouter un nouveau groupe de systèmes :\n"
+"   ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n"
+"\n"
+" Ajouter des membres à un groupe de systèmes :\n"
+"   ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n"
+"\n"
+" Ajouter un groupe de systèmes en tant que membre d'un autre :\n"
+"   ipa hostgroup-add-member --hostgroups=baltimore maryland\n"
+"\n"
+" Supprimer un système d'un groupe :\n"
+"   ipa hostgroup-remove-member --hosts=box2 baltimore\n"
+"\n"
+" Afficher un groupe de systèmes :\n"
+"   ipa hostgroup-show baltimore\n"
+"\n"
+" Supprimer un groupe de systèmes :\n"
+"   ipa hostgroup-del baltimore\n"
+
 msgid "host group"
 msgstr "groupe de systèmes"
 
@@ -4515,6 +5412,24 @@ msgstr "Raison de la révocation"
 msgid "Remove from CRL"
 msgstr "Retrait de la LRC"
 
+msgid ""
+"<ol> <li>Create a certificate database or use an existing one. To create a "
+"new database:<br/> <code># certutil -N -d &lt;database path&gt;</code> </li> "
+"<li>Create a CSR with subject <em>CN=&lt;hostname&gt;,O=&lt;realm&gt;</em>, "
+"for example:<br/> <code># certutil -R -d &lt;database path&gt; -a -g &lt;key "
+"size&gt; -s 'CN=${hostname},O=${realm}'</code> </li> <li> Copy and paste the "
+"CSR (from <em>-----BEGIN NEW CERTIFICATE REQUEST-----</em> to <em>-----END "
+"NEW CERTIFICATE REQUEST-----</em>) into the text area below: </li> </ol>"
+msgstr ""
+"<ol> <li>Créer une base de données de certificats ou utiliser une base "
+"existante. Pour créer une nouvelle  :<br/> <code># certutil -N -d &lt;"
+"database path&gt;</code> </li> <li>Créer une demande de signature (CSR) de "
+"certificat avec le sujet <em>CN=&lt;hostname&gt;,O=&lt;realm&gt;</em>, par "
+"exemple :<br/> <code># certutil -R -d &lt;database path&gt; -a -g &lt;key "
+"size&gt; -s 'CN=${hostname},O=${realm}'</code> </li> <li> Copier/coller le "
+"CSR (de <em>-----BEGIN NEW CERTIFICATE REQUEST-----</em> à <em>-----END NEW "
+"CERTIFICATE REQUEST-----</em>) dans la zone de texte ci-dessous : </li> </ol>"
+
 msgid "Certificate requested"
 msgstr "Certificat demandé"
 
@@ -5572,6 +6487,53 @@ msgstr[1] "%(count)d greffons chargés"
 msgid "Number of plugins loaded"
 msgstr "Nombre de greffons chargés"
 
+msgid ""
+"\n"
+"Netgroups\n"
+"\n"
+"A netgroup is a group used for permission checking. It can contain both\n"
+"user and host values.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a new netgroup:\n"
+"   ipa netgroup-add --desc=\"NFS admins\" admins\n"
+"\n"
+" Add members to the netgroup:\n"
+"   ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n"
+"\n"
+" Remove a member from the netgroup:\n"
+"   ipa netgroup-remove-member --users=tuser2 admins\n"
+"\n"
+" Display information about a netgroup:\n"
+"   ipa netgroup-show admins\n"
+"\n"
+" Delete a netgroup:\n"
+"   ipa netgroup-del admins\n"
+msgstr ""
+"\n"
+"Netgroups\n"
+"\n"
+"Un netgroup est un groupe utilisé pour la vérification de permissions. Il\n"
+"peut contenir à la fois des utilisateurs et des noms de systèmes.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter un nouveau netgroup :\n"
+"   ipa netgroup-add --desc=\"NFS admins\" admins\n"
+"\n"
+" Ajouter des membres au netgroup :\n"
+"   ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n"
+"\n"
+" Retirer un membre du netgroup :\n"
+"   ipa netgroup-remove-member --users=tuser2 admins\n"
+"\n"
+" Afficher les informations sur un netgroup :\n"
+"   ipa netgroup-show admins\n"
+"\n"
+" Supprimer un netgroup :\n"
+"   ipa netgroup-del admins\n"
+
 msgid "Member Host"
 msgstr "Système membre"
 
@@ -5611,7 +6573,7 @@ msgid ""
 "hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
 "common namespace"
 msgstr ""
-"Un groupe de systèmes nommé « %s » existe déjà. Les groupes de systèmes et "
+"Un groupe de systèmes nommé « %s » existe déjà. Les groupes de systèmes et "
 "netgroups partagent le même espace de nommage"
 
 msgid "Delete a netgroup."
@@ -6494,6 +7456,71 @@ msgstr "Supprimer des privilèges d'un rôle."
 msgid "Number of privileges removed"
 msgstr "Nombre de privilèges retirés"
 
+msgid ""
+"\n"
+"Self-service Permissions\n"
+"\n"
+"A permission enables fine-grained delegation of permissions. Access Control\n"
+"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
+"given tasks such as adding a user, modifying a group, etc.\n"
+"\n"
+"A Self-service permission defines what an object can change in its own "
+"entry.\n"
+"\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a self-service rule to allow users to manage their address (using Bash\n"
+" brace expansion):\n"
+"   ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c,"
+"st} \"Users manage their own address\"\n"
+"\n"
+" When managing the list of attributes you need to include all attributes\n"
+" in the list, including existing ones.\n"
+" Add telephoneNumber to the list (using Bash brace expansion):\n"
+"   ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} "
+"\"Users manage their own address\"\n"
+"\n"
+" Display our updated rule:\n"
+"   ipa selfservice-show \"Users manage their own address\"\n"
+"\n"
+" Delete a rule:\n"
+"   ipa selfservice-del \"Users manage their own address\"\n"
+msgstr ""
+"\n"
+"Permissions self-service\n"
+"\n"
+"Une permission permet la délégation fine de permissions. Les règles ou\n"
+"instructions de contrôle d'accès (ACI) accorde la permission d'effectuer\n"
+"des tâches spécifiques comme ajouter un utilisateur, modifier un groupe, "
+"etc.\n"
+"\n"
+"Une permission self-service définit ce qu'un objet peut modifier dans sa\n"
+"propre entrée.\n"
+"\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter une règle self-service permettant aux utilisateurs de gérer leur "
+"adresse\n"
+" (en utilisant les capacités d'extension des accolades dans bash) :\n"
+"   ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c,"
+"st} \"Users manage their own address\"\n"
+"\n"
+" Tous les attributs doivent être mentionnés lors de l'utilisation de listes "
+"d'attributs,\n"
+" y compris ceux déjà existants. Ajouter telephoneNumber à la liste (en "
+"utilisant les capacités\n"
+" d'extension des accolades dans bash) :\n"
+"   ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} "
+"\"Users manage their own address\"\n"
+"\n"
+" Afficher la règle modifiée :\n"
+"   ipa selfservice-show \"Users manage their own address\"\n"
+"\n"
+" Supprimer une règle :\n"
+"   ipa selfservice-del \"Users manage their own address\"\n"
+
 msgid "self service permission"
 msgstr "permission self-service"
 
@@ -6545,6 +7572,112 @@ msgstr[1] "%(count)d permissions self-service correspondantes"
 msgid "Display information about a self-service permission."
 msgstr "Afficher les informations sur une permission self-service."
 
+msgid ""
+"\n"
+"SELinux User Mapping\n"
+"\n"
+"Map IPA users to SELinux users by host.\n"
+"\n"
+"Hosts, hostgroups, users and groups can be either defined within\n"
+"the rule or it may point to an existing HBAC rule. When using\n"
+"--hbacrule option to selinuxusermap-find an exact match is made on the\n"
+"HBAC rule name, so only one or zero entries will be returned.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host "
+"\"server\":\n"
+"   ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n"
+"   ipa selinuxusermap-add-host --hosts=server.example.com test1\n"
+"\n"
+" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an "
+"existing HBAC rule for users and hosts:\n"
+"   ipa selinuxusermap-add --usercat=all --hbacrule=webserver --"
+"selinuxuser=guest_u:s0 test2\n"
+"\n"
+" Display the properties of a rule:\n"
+"   ipa selinuxusermap-show test2\n"
+"\n"
+" Create a rule for a specific user. This sets the SELinux context for\n"
+" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n"
+"   ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0."
+"c1023 john_unconfined\n"
+"   ipa selinuxusermap-add-user --users=john john_unconfined\n"
+"\n"
+" Disable a rule:\n"
+"   ipa selinuxusermap-disable test1\n"
+"\n"
+" Enable a rule:\n"
+"   ipa selinuxusermap-enable test1\n"
+"\n"
+" Find a rule referencing a specific HBAC rule:\n"
+"   ipa selinuxusermap-find --hbacrule=allow_some\n"
+"\n"
+" Remove a rule:\n"
+"   ipa selinuxusermap-del john_unconfined\n"
+"\n"
+"SEEALSO:\n"
+"\n"
+" The list controlling the order in which the SELinux user map is applied\n"
+" and the default SELinux user are available in the config-show command.\n"
+msgstr ""
+"\n"
+"Correspondances d'utilisateurs SELinux\n"
+"\n"
+"Correspondance des utilisateurs IPA vers les utilisateurs SELinux par hôte.\n"
+"\n"
+"Systèmes, groupes de systèmes, utilisateurs et groupes peuvent être définis "
+"soit\n"
+"au sein de la règle ou peuvent pointer vers une règle HBAC existante. Lors "
+"de\n"
+"l'utilisation de l'option --hbacrule à selinuxusermap-find, une "
+"correspondance\n"
+"exacte est faite sur le nom de la règle HBAC, de sorte que seule une ou "
+"aucune entrée\n"
+"soit renvoyée.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Créer une règle « test1 » qui attribue tous les utilisateurs à xguest_u:s0 "
+"sur\n"
+" le système « server » :\n"
+"   ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n"
+"   ipa selinuxusermap-add-host --hosts=server.example.com test1\n"
+"\n"
+" Créer une règle « test2 » qui attribue tous les utilisateurs à guest_u:s0 "
+"et\n"
+" utilise un règle HBAC existante pour les utilisateurs et systèmes :\n"
+"   ipa selinuxusermap-add --usercat=all --hbacrule=webserver --"
+"selinuxuser=guest_u:s0 test1\n"
+"\n"
+" Afficher les informations d'une règle :\n"
+"   ipa selinuxusermap-show test2\n"
+"\n"
+" Créer une règle pour un utilisateur spécifique. Ceci définit le contexte\n"
+" SELinux d'un utilisateur john à unconfined_u:s0-s0:c0.c1023 sur toute "
+"machine :\n"
+"   ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0."
+"c1023 john_unconfined\n"
+"   ipa selinuxusermap-add-user --users=john john_unconfined\n"
+"\n"
+" Désactiver une règle nommée :\n"
+"   ipa selinuxusermap-disable test1\n"
+"\n"
+" Activer une règle nommée :\n"
+"   ipa selinuxusermap-enable test1\n"
+"\n"
+" Trouver une règle référençant une règle HBAC spécifique :\n"
+"   ipa selinuxusermap-find --hbacrule=allow_some\n"
+"\n"
+" Supprimer une règle nommée :\n"
+"   ipa selinuxusermap-del john_unconfined\n"
+"\n"
+"VOIR AUSSI :\n"
+"\n"
+" La liste contrôlant l'ordre dans lequel la carte de correspondance SELinux "
+"est appliquée et l'utilisateur SELinux par défaut sont disponibles dans la "
+"commande config-show.\n"
+
 msgid "HBAC rule and local members cannot both be set"
 msgstr ""
 "Les règles HBAC et les membres locaux ne peuvent être définis simultanément"
@@ -6849,6 +7982,55 @@ msgstr[1] "%(count)d commandes Sudo correspondantes"
 msgid "Display Sudo Command."
 msgstr "Afficher une commande Sudo."
 
+msgid ""
+"\n"
+"Groups of Sudo Commands\n"
+"\n"
+"Manage groups of Sudo Commands.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a new Sudo Command Group:\n"
+"   ipa sudocmdgroup-add --desc='administrators commands' admincmds\n"
+"\n"
+" Remove a Sudo Command Group:\n"
+"   ipa sudocmdgroup-del admincmds\n"
+"\n"
+" Manage Sudo Command Group membership, commands:\n"
+"   ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/"
+"vim admincmds\n"
+"\n"
+" Manage Sudo Command Group membership, commands:\n"
+"   ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n"
+"\n"
+" Show a Sudo Command Group:\n"
+"   ipa group-show localadmins\n"
+msgstr ""
+"\n"
+"Groupes de commandes Sudo\n"
+"\n"
+"Administre les groupes de commandes Sudo.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter un nouveau groupe de commandes Sudo :\n"
+"   ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n"
+"\n"
+" Supprimer un groupe de commandes Sudo :\n"
+"   ipa sudocmdgroup-del admincmds\n"
+"\n"
+" Administrer l'appartenance et les commandes d'un groupe de commandes "
+"Sudo :\n"
+"   ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/"
+"vim admincmds\n"
+"\n"
+" Administrer l'appartenance et les commandes d'un groupe de commandes "
+"Sudo :\n"
+"   ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n"
+"\n"
+" Afficher un groupe de commandes Sudo :\n"
+"   ipa group-show localadmins\n"
+
 msgid "sudo command group"
 msgstr "groupe de commandes sudo"
 
@@ -7375,6 +8557,111 @@ msgstr "Configuration de la relation d'approbation « %(value)s » modifiée."
 msgid "Show global trust configuration."
 msgstr "Afficher la configuration globale des relations d'approbation."
 
+msgid "Resolve security identifiers of users and groups in trusted domains"
+msgstr ""
+"Résoudre les identifiants de sécurité des groupes et utilisateurs des "
+"domaines approuvés"
+
+msgid "Security Identifiers (SIDs)"
+msgstr "Identifiants de sécurité (SID)"
+
+msgid "Name"
+msgstr "Nom"
+
+msgid "SID"
+msgstr "SID"
+
+msgid ""
+"\n"
+"Users\n"
+"\n"
+"Manage user entries. All users are POSIX users.\n"
+"\n"
+"IPA supports a wide range of username formats, but you need to be aware of "
+"any\n"
+"restrictions that may apply to your particular environment. For example,\n"
+"usernames that start with a digit or usernames that exceed a certain length\n"
+"may cause problems for some UNIX systems.\n"
+"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n"
+"\n"
+"Disabling a user account prevents that user from obtaining new Kerberos\n"
+"credentials. It does not invalidate any credentials that have already\n"
+"been issued.\n"
+"\n"
+"Password management is not a part of this module. For more information\n"
+"about this topic please see: ipa help passwd\n"
+"\n"
+"Account lockout on password failure happens per IPA master. The user-status\n"
+"command can be used to identify which master the user is locked out on.\n"
+"It is on that master the administrator must unlock the user.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Add a new user:\n"
+"   ipa user-add --first=Tim --last=User --password tuser1\n"
+"\n"
+" Find all users whose entries include the string \"Tim\":\n"
+"   ipa user-find Tim\n"
+"\n"
+" Find all users with \"Tim\" as the first name:\n"
+"   ipa user-find --first=Tim\n"
+"\n"
+" Disable a user account:\n"
+"   ipa user-disable tuser1\n"
+"\n"
+" Enable a user account:\n"
+"   ipa user-enable tuser1\n"
+"\n"
+" Delete a user:\n"
+"   ipa user-del tuser1\n"
+msgstr ""
+"\n"
+"Utilisateurs\n"
+"\n"
+"Administration des utilisateurs. Tous les utilisateurs sont de type POSIX.\n"
+"\n"
+"IPA permet l'utilisation d'un grand nombre de formats de noms "
+"d'utilisateurs.\n"
+"Certaines restrictions peuvent cependant s'appliquer à un environnement\n"
+"particulier. À titre d'exemple, les noms d'utilisateurs commençant par\n"
+"un chiffre ou ceux excédant une certaine longueur peuvent poser souci à\n"
+"certains systèmes UNIX.\n"
+"Utiliser la commande « ipa config-mod » afin de modifier le format de nom\n"
+"autorisé par les outils IPA.\n"
+"\n"
+"La désactivation d'un compte utilisateur lui interdit d'obtenir de\n"
+"nouvelles informations de crédit Kerberos. Elle n'invalide pas les crédits\n"
+"déjà obtenus.\n"
+"\n"
+"L'administration des mots de passe ne fait pas partie de ce module. Pour\n"
+"plus d'informations sur ce sujet, cf. : ipa help passwd\n"
+"\n"
+"Le verrouillage de compte en cas d'échec de mot de passe se passe par \n"
+"maître IPA. La comamnde « user-status » peut être utilisée pour identifier \n"
+"le maître sur lequel l'utilisateur est bloqué. C'est sur ​​ce maître\n"
+"que l'administrateur doit déverrouiller l'utilisateur.\n"
+"\n"
+"EXEMPLES :\n"
+"\n"
+" Ajouter un nouvel utilisateur :\n"
+"   ipa user-add --first=Tim --last=User --password tuser1\n"
+"\n"
+" Trouver tous les utilisateurs dont l'entrée contient la chaîne « Tim » :\n"
+"   ipa user-find Tim\n"
+"\n"
+" Trouver tous les utilisateurs ayant « Tim » comme prénom :\n"
+"   ipa user-find --first=Tim\n"
+"\n"
+" Désactiver un compte utilisateur :\n"
+"   ipa user-disable tuser1\n"
+"\n"
+" Activer un compte utilisateur :\n"
+"   ipa user-enable tuser1\n"
+"\n"
+" Supprimer un utilisateur :\n"
+"   ipa user-del tuser1\n"
+"\n"
+
 msgid "Kerberos keys available"
 msgstr "Clés Kerberos disponibles"
 
@@ -7821,6 +9108,11 @@ msgstr "Impossible de communiquer avec le CMS (%s)"
 msgid "Unable to communicate with CMS"
 msgstr "Impossible de communiquer avec le CMS"
 
+msgid "find not supported on CAs upgraded from 9 to 10"
+msgstr ""
+"la recherche n'est pas prise en charge sur les AC mises à jour de la version "
+"9 à la version 10"
+
 msgid "The hostname to register as"
 msgstr "Le nom de système sous lequel s'enregistrer"
 
@@ -7841,31 +9133,6 @@ msgstr ""
 "Privilège en écriture insuffisant sur l'attribut « krbLastPwdChange »de  "
 "l'entrée « %s »."
 
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"Le sujet de la demande \"%(request_subject)s\" ne correspondant pas à la "
-"forme \"%(subject_base)s\""
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "impossible de décoder le csr : %s"
-
-msgid "file operation"
-msgstr "opération fichier"
-
-msgid "cannot obtain next serial number"
-msgstr "impossible d'obtenir le nouveau numéro de série"
-
-msgid "certutil failure"
-msgstr "échec de certutil"
-
-#, python-format
-msgid "Unable to decode certificate in entry: %s"
-msgstr "Impossible de décoder le certificat de l'entrée %s"
-
 msgid "Request must be a dict"
 msgstr "La requête doit être un dictionnaire"
 
diff --git a/install/po/id.po b/install/po/id.po
index 1c302d423..314545a4c 100644
--- a/install/po/id.po
+++ b/install/po/id.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# jdennis <jdennis@redhat.com>, 2011.
-# Teguh DC <dheche@songolimo.net>, 2010.
+# jdennis <jdennis@redhat.com>, 2011
+# Teguh Dwicaksana <dheche@songolimo.net>, 2010
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Indonesian <trans-id@lists.fedoraproject.org>\n"
+"Language: id\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: id\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
 #, python-format
@@ -278,16 +278,3 @@ msgstr[0] "%(count)d pengguna sesuai"
 #, python-format
 msgid "Unable to communicate with CMS (%s)"
 msgstr "Tidak dapat berkomunikasi dengan CMS (%s)"
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "tidak dapat mengurai csr: %s"
-
-msgid "file operation"
-msgstr "operasi berkas"
-
-msgid "cannot obtain next serial number"
-msgstr "tidak dapat memperoleh nomor seri berikutnya"
-
-msgid "certutil failure"
-msgstr "kegagalah certutil"
diff --git a/install/po/ipa.pot b/install/po/ipa.pot
index 985d5f21f..ada8b34d7 100644
--- a/install/po/ipa.pot
+++ b/install/po/ipa.pot
@@ -9,7 +9,7 @@ msgstr ""
 "Project-Id-Version: ipa\n"
 "Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
 "newticket\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -952,8 +952,8 @@ msgstr ""
 
 #: ipalib/plugins/automember.py:176 ipalib/plugins/automount.py:579
 #: ipalib/plugins/group.py:155 ipalib/plugins/hbacrule.py:179
-#: ipalib/plugins/hbacsvc.py:79 ipalib/plugins/hbacsvcgroup.py:77
-#: ipalib/plugins/host.py:265 ipalib/plugins/hostgroup.py:90
+#: ipalib/plugins/hbacsvc.py:79 ipalib/plugins/hbacsvcgroup.py:73
+#: ipalib/plugins/host.py:266 ipalib/plugins/hostgroup.py:90
 #: ipalib/plugins/netgroup.py:122 ipalib/plugins/privilege.py:73
 #: ipalib/plugins/role.py:92 ipalib/plugins/selinuxusermap.py:184
 #: ipalib/plugins/sudocmd.py:77 ipalib/plugins/sudocmdgroup.py:78
@@ -1272,7 +1272,7 @@ msgstr ""
 msgid "Automount Location"
 msgstr ""
 
-#: ipalib/plugins/automount.py:215 ipalib/plugins/host.py:275
+#: ipalib/plugins/automount.py:215 ipalib/plugins/host.py:276
 msgid "Location"
 msgstr ""
 
@@ -1860,7 +1860,7 @@ msgstr ""
 msgid "Time limit of search in seconds"
 msgstr ""
 
-#: ipalib/plugins/baseldap.py:1723 ipalib/plugins/cert.py:697
+#: ipalib/plugins/baseldap.py:1723 ipalib/plugins/cert.py:696
 #: ipalib/plugins/hbactest.py:285
 msgid "Size Limit"
 msgstr ""
@@ -1888,9 +1888,8 @@ msgid ""
 "(CSR)\n"
 "in PEM format.\n"
 "\n"
-"If using the selfsign back end then the subject in the CSR needs to match\n"
-"the subject configured in the server. The dogtag CA uses just the CN\n"
-"value of the CSR and forces the rest of the subject.\n"
+"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n"
+"subject to values configured in the server.\n"
 "\n"
 "A certificate is stored with a service principal and a service principal\n"
 "needs a host.\n"
@@ -1962,255 +1961,255 @@ msgid ""
 "\n"
 msgstr ""
 
-#: ipalib/plugins/cert.py:146
+#: ipalib/plugins/cert.py:145
 msgid "Failure decoding Certificate Signing Request:"
 msgstr ""
 
-#: ipalib/plugins/cert.py:159 ipalib/plugins/cert.py:176
+#: ipalib/plugins/cert.py:158 ipalib/plugins/cert.py:175
 msgid "Failure decoding Certificate Signing Request"
 msgstr ""
 
-#: ipalib/plugins/cert.py:178
+#: ipalib/plugins/cert.py:177
 #, python-format
 msgid "Failure decoding Certificate Signing Request: %s"
 msgstr ""
 
-#: ipalib/plugins/cert.py:241
+#: ipalib/plugins/cert.py:240
 msgid "Submit a certificate signing request."
 msgstr ""
 
-#: ipalib/plugins/cert.py:245
+#: ipalib/plugins/cert.py:244
 msgid "CSR"
 msgstr ""
 
-#: ipalib/plugins/cert.py:254 ipalib/plugins/service.py:321
+#: ipalib/plugins/cert.py:253 ipalib/plugins/service.py:321
 msgid "Principal"
 msgstr ""
 
-#: ipalib/plugins/cert.py:255
+#: ipalib/plugins/cert.py:254
 msgid "Service principal for this certificate (e.g. HTTP/test.example.com)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:262
+#: ipalib/plugins/cert.py:261
 msgid "automatically add the principal if it doesn't exist"
 msgstr ""
 
-#: ipalib/plugins/cert.py:270 ipalib/plugins/cert.py:482
-#: ipalib/plugins/entitle.py:176 ipalib/plugins/host.py:304
+#: ipalib/plugins/cert.py:269 ipalib/plugins/cert.py:481
+#: ipalib/plugins/entitle.py:176 ipalib/plugins/host.py:305
 #: ipalib/plugins/internal.py:319 ipalib/plugins/internal.py:415
 #: ipalib/plugins/service.py:328
 msgid "Certificate"
 msgstr ""
 
-#: ipalib/plugins/cert.py:273 ipalib/plugins/cert.py:485
-#: ipalib/plugins/cert.py:639 ipalib/plugins/cert.py:640
+#: ipalib/plugins/cert.py:272 ipalib/plugins/cert.py:484
+#: ipalib/plugins/cert.py:638 ipalib/plugins/cert.py:639
 #: ipalib/plugins/host.py:165 ipalib/plugins/internal.py:332
 #: ipalib/plugins/service.py:102
 msgid "Subject"
 msgstr ""
 
-#: ipalib/plugins/cert.py:276 ipalib/plugins/cert.py:488
+#: ipalib/plugins/cert.py:275 ipalib/plugins/cert.py:487
 #: ipalib/plugins/host.py:174 ipalib/plugins/service.py:111
 msgid "Issuer"
 msgstr ""
 
-#: ipalib/plugins/cert.py:279 ipalib/plugins/cert.py:491
+#: ipalib/plugins/cert.py:278 ipalib/plugins/cert.py:490
 #: ipalib/plugins/host.py:177 ipalib/plugins/service.py:114
 msgid "Not Before"
 msgstr ""
 
-#: ipalib/plugins/cert.py:282 ipalib/plugins/cert.py:494
+#: ipalib/plugins/cert.py:281 ipalib/plugins/cert.py:493
 #: ipalib/plugins/host.py:180 ipalib/plugins/service.py:117
 msgid "Not After"
 msgstr ""
 
-#: ipalib/plugins/cert.py:285 ipalib/plugins/cert.py:497
+#: ipalib/plugins/cert.py:284 ipalib/plugins/cert.py:496
 #: ipalib/plugins/host.py:183 ipalib/plugins/service.py:120
 msgid "Fingerprint (MD5)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:288 ipalib/plugins/cert.py:500
+#: ipalib/plugins/cert.py:287 ipalib/plugins/cert.py:499
 #: ipalib/plugins/host.py:186 ipalib/plugins/service.py:123
 msgid "Fingerprint (SHA1)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:291 ipalib/plugins/cert.py:470
-#: ipalib/plugins/cert.py:711
+#: ipalib/plugins/cert.py:290 ipalib/plugins/cert.py:469
+#: ipalib/plugins/cert.py:710
 msgid "Serial number"
 msgstr ""
 
-#: ipalib/plugins/cert.py:294 ipalib/plugins/cert.py:506
-#: ipalib/plugins/cert.py:708
+#: ipalib/plugins/cert.py:293 ipalib/plugins/cert.py:505
+#: ipalib/plugins/cert.py:707
 msgid "Serial number (hex)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:301 ipalib/plugins/entitle.py:232
+#: ipalib/plugins/cert.py:300 ipalib/plugins/entitle.py:232
 #: ipalib/plugins/entitle.py:593 ipalib/plugins/misc.py:57
 msgid "Dictionary mapping variable name to value"
 msgstr ""
 
-#: ipalib/plugins/cert.py:334
+#: ipalib/plugins/cert.py:333
 msgid "No hostname was found in subject of request."
 msgstr ""
 
-#: ipalib/plugins/cert.py:339
+#: ipalib/plugins/cert.py:338
 #, python-format
 msgid ""
 "hostname in subject of request '%(subject_host)s' does not match principal "
 "hostname '%(hostname)s'"
 msgstr ""
 
-#: ipalib/plugins/cert.py:357
+#: ipalib/plugins/cert.py:356
 msgid "The service principal for this request doesn't exist."
 msgstr ""
 
-#: ipalib/plugins/cert.py:363
+#: ipalib/plugins/cert.py:362
 msgid "You need to be a member of the serviceadmin role to add services"
 msgstr ""
 
-#: ipalib/plugins/cert.py:368
+#: ipalib/plugins/cert.py:367
 #, python-format
 msgid ""
 "Insufficient 'write' privilege to the 'userCertificate' attribute of entry "
 "'%s'."
 msgstr ""
 
-#: ipalib/plugins/cert.py:384
+#: ipalib/plugins/cert.py:383
 #, python-format
 msgid "no host record for subject alt name %s in certificate request"
 msgstr ""
 
-#: ipalib/plugins/cert.py:390
+#: ipalib/plugins/cert.py:389
 #, python-format
 msgid ""
 "Insufficient privilege to create a certificate with subject alt name '%s'."
 msgstr ""
 
-#: ipalib/plugins/cert.py:443
+#: ipalib/plugins/cert.py:442
 msgid "Check the status of a certificate signing request."
 msgstr ""
 
-#: ipalib/plugins/cert.py:447
+#: ipalib/plugins/cert.py:446
 msgid "Request id"
 msgstr ""
 
-#: ipalib/plugins/cert.py:453
+#: ipalib/plugins/cert.py:452
 msgid "Request status"
 msgstr ""
 
-#: ipalib/plugins/cert.py:471
+#: ipalib/plugins/cert.py:470
 msgid "Serial number in decimal or if prefixed with 0x in hexadecimal"
 msgstr ""
 
-#: ipalib/plugins/cert.py:476
+#: ipalib/plugins/cert.py:475
 msgid "Retrieve an existing certificate."
 msgstr ""
 
-#: ipalib/plugins/cert.py:503 ipalib/plugins/host.py:189
+#: ipalib/plugins/cert.py:502 ipalib/plugins/host.py:189
 #: ipalib/plugins/internal.py:329 ipalib/plugins/internal.py:358
 #: ipalib/plugins/service.py:126
 msgid "Revocation reason"
 msgstr ""
 
-#: ipalib/plugins/cert.py:512
+#: ipalib/plugins/cert.py:511
 msgid "Output filename"
 msgstr ""
 
-#: ipalib/plugins/cert.py:513
+#: ipalib/plugins/cert.py:512
 msgid "File to store the certificate in."
 msgstr ""
 
-#: ipalib/plugins/cert.py:564
+#: ipalib/plugins/cert.py:563
 msgid "Revoke a certificate."
 msgstr ""
 
-#: ipalib/plugins/cert.py:570
+#: ipalib/plugins/cert.py:569
 msgid "Revoked"
 msgstr ""
 
-#: ipalib/plugins/cert.py:578 ipalib/plugins/cert.py:644
+#: ipalib/plugins/cert.py:577 ipalib/plugins/cert.py:643
 msgid "Reason"
 msgstr ""
 
-#: ipalib/plugins/cert.py:579 ipalib/plugins/cert.py:645
+#: ipalib/plugins/cert.py:578 ipalib/plugins/cert.py:644
 msgid "Reason for revoking the certificate (0-10)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:601
+#: ipalib/plugins/cert.py:600
 msgid "7 is not a valid revocation reason"
 msgstr ""
 
-#: ipalib/plugins/cert.py:611
+#: ipalib/plugins/cert.py:610
 msgid "Take a revoked certificate off hold."
 msgstr ""
 
-#: ipalib/plugins/cert.py:617
+#: ipalib/plugins/cert.py:616
 msgid "Unrevoked"
 msgstr ""
 
-#: ipalib/plugins/cert.py:620 ipalib/plugins/internal.py:249
+#: ipalib/plugins/cert.py:619 ipalib/plugins/internal.py:249
 msgid "Error"
 msgstr ""
 
-#: ipalib/plugins/cert.py:635
+#: ipalib/plugins/cert.py:634
 msgid "Search for existing certificates."
 msgstr ""
 
-#: ipalib/plugins/cert.py:651
+#: ipalib/plugins/cert.py:650
 msgid "minimum serial number"
 msgstr ""
 
-#: ipalib/plugins/cert.py:656
+#: ipalib/plugins/cert.py:655
 msgid "maximum serial number"
 msgstr ""
 
-#: ipalib/plugins/cert.py:661
+#: ipalib/plugins/cert.py:660
 msgid "match the common name exactly"
 msgstr ""
 
-#: ipalib/plugins/cert.py:665
+#: ipalib/plugins/cert.py:664
 msgid "Valid not after from this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:669
+#: ipalib/plugins/cert.py:668
 msgid "Valid not after to this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:673
+#: ipalib/plugins/cert.py:672
 msgid "Valid not before from this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:677
+#: ipalib/plugins/cert.py:676
 msgid "Valid not before to this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:681
+#: ipalib/plugins/cert.py:680
 msgid "Issued on from this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:685
+#: ipalib/plugins/cert.py:684
 msgid "Issued on to this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:689
+#: ipalib/plugins/cert.py:688
 msgid "Revoked on from this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:693
+#: ipalib/plugins/cert.py:692
 msgid "Revoked on to this date (YYYY-mm-dd)"
 msgstr ""
 
-#: ipalib/plugins/cert.py:698
+#: ipalib/plugins/cert.py:697
 msgid "Maximum number of certs returned"
 msgstr ""
 
-#: ipalib/plugins/cert.py:714 ipalib/plugins/internal.py:366
+#: ipalib/plugins/cert.py:713 ipalib/plugins/internal.py:366
 #: ipalib/plugins/internal.py:432 ipalib/plugins/internal.py:493
 #: ipalib/plugins/internal.py:569 ipalib/plugins/internal.py:676
 msgid "Status"
 msgstr ""
 
-#: ipalib/plugins/cert.py:719
+#: ipalib/plugins/cert.py:718
 #, python-format
 msgid "%(count)d certificate matched"
 msgid_plural "%(count)d certificates matched"
@@ -2871,7 +2870,7 @@ msgid "Cannot create reverse record for \"%(value)s\": %(exc)s"
 msgstr ""
 
 #: ipalib/plugins/dns.py:876 ipalib/plugins/dns.py:899
-#: ipalib/plugins/host.py:396
+#: ipalib/plugins/host.py:403
 msgid "IP Address"
 msgstr ""
 
@@ -2885,7 +2884,7 @@ msgstr ""
 
 #: ipalib/plugins/dns.py:914 ipalib/plugins/dns.py:953
 #: ipalib/plugins/dns.py:1206 ipalib/plugins/dns.py:1303
-#: ipalib/plugins/dns.py:2896
+#: ipalib/plugins/dns.py:2919
 msgid "Hostname"
 msgstr ""
 
@@ -3294,7 +3293,7 @@ msgid ""
 "a standard format \"IP_ADDRESS port PORT\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:1703 ipalib/plugins/dns.py:2966
+#: ipalib/plugins/dns.py:1703 ipalib/plugins/dns.py:2989
 msgid "Forward policy"
 msgstr ""
 
@@ -3305,7 +3304,7 @@ msgid ""
 "forwarders are disregarded."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1711 ipalib/plugins/dns.py:2973
+#: ipalib/plugins/dns.py:1711 ipalib/plugins/dns.py:2996
 msgid "Allow PTR sync"
 msgstr ""
 
@@ -3319,9 +3318,9 @@ msgstr ""
 msgid "Create new DNS zone (SOA record)."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1779 ipalib/plugins/dns.py:1870
-#: ipalib/plugins/dns.py:2331 ipalib/plugins/host.py:388
-#: ipalib/plugins/permission.py:298 ipalib/plugins/realmdomains.py:90
+#: ipalib/plugins/dns.py:1779 ipalib/plugins/dns.py:1893
+#: ipalib/plugins/dns.py:2354 ipalib/plugins/host.py:395
+#: ipalib/plugins/permission.py:298 ipalib/plugins/realmdomains.py:97
 #: ipalib/plugins/service.py:369
 msgid "Force"
 msgstr ""
@@ -3354,206 +3353,206 @@ msgstr ""
 msgid "Nameserver DNS record is created only for nameservers in current zone"
 msgstr ""
 
-#: ipalib/plugins/dns.py:1850
+#: ipalib/plugins/dns.py:1862
 msgid "Delete DNS zone (SOA record)."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1852
+#: ipalib/plugins/dns.py:1864
 #, python-format
 msgid "Deleted DNS zone \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:1866
+#: ipalib/plugins/dns.py:1889
 msgid "Modify DNS zone (SOA record)."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1871
+#: ipalib/plugins/dns.py:1894
 msgid "Force nameserver change even if nameserver not in DNS"
 msgstr ""
 
-#: ipalib/plugins/dns.py:1888
+#: ipalib/plugins/dns.py:1911
 msgid "Search for DNS zones (SOA records)."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1912
+#: ipalib/plugins/dns.py:1935
 msgid "Forward zones only"
 msgstr ""
 
-#: ipalib/plugins/dns.py:1914
+#: ipalib/plugins/dns.py:1937
 msgid "Search for forward zones only"
 msgstr ""
 
-#: ipalib/plugins/dns.py:1934
+#: ipalib/plugins/dns.py:1957
 msgid "Display information about a DNS zone (SOA record)."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1942
+#: ipalib/plugins/dns.py:1965
 msgid "Disable DNS Zone."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1945
+#: ipalib/plugins/dns.py:1968
 #, python-format
 msgid "Disabled DNS zone \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:1963
+#: ipalib/plugins/dns.py:1986
 msgid "Enable DNS Zone."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1966
+#: ipalib/plugins/dns.py:1989
 #, python-format
 msgid "Enabled DNS zone \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:1983
+#: ipalib/plugins/dns.py:2006
 msgid "Add a permission for per-zone access delegation."
 msgstr ""
 
-#: ipalib/plugins/dns.py:1986
+#: ipalib/plugins/dns.py:2009
 #, python-format
 msgid "Added system permission \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:2019
+#: ipalib/plugins/dns.py:2042
 msgid "Remove a permission for per-zone access delegation."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2022
+#: ipalib/plugins/dns.py:2045
 #, python-format
 msgid "Removed system permission \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:2053
+#: ipalib/plugins/dns.py:2076
 msgid "DNS resource record"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2054
+#: ipalib/plugins/dns.py:2077
 msgid "DNS resource records"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2059
+#: ipalib/plugins/dns.py:2082
 msgid "DNS Resource Records"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2060
+#: ipalib/plugins/dns.py:2083
 msgid "DNS Resource Record"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2066 ipalib/plugins/dns.py:2067
+#: ipalib/plugins/dns.py:2089 ipalib/plugins/dns.py:2090
 msgid "Record name"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2072 ipalib/plugins/dns.py:2073
+#: ipalib/plugins/dns.py:2095 ipalib/plugins/dns.py:2096
 msgid "Time to live"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2077
+#: ipalib/plugins/dns.py:2100 ipalib/plugins/host.py:329
 msgid "Class"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2078
+#: ipalib/plugins/dns.py:2101
 msgid "DNS class"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2084
+#: ipalib/plugins/dns.py:2107
 msgid "Structured"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2085
+#: ipalib/plugins/dns.py:2108
 msgid "Parse all raw DNS records and return them in a structured way"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2116
+#: ipalib/plugins/dns.py:2139
 #, python-format
 msgid ""
 "Reverse zone for PTR record should be a sub-zone of one the following fully "
 "qualified domains: %s"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2122
+#: ipalib/plugins/dns.py:2145
 #, python-format
 msgid ""
 "Reverse zone %(name)s requires exactly %(count)d IP address components, "
 "%(user_count)d given"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2294
+#: ipalib/plugins/dns.py:2317
 msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2300
+#: ipalib/plugins/dns.py:2323
 msgid ""
 "CNAME record is not allowed to coexist with any other record (RFC 1034, "
 "section 3.6.2)"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2312
+#: ipalib/plugins/dns.py:2335
 msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2317
+#: ipalib/plugins/dns.py:2340
 msgid ""
 "DNAME record is not allowed to coexist with an NS record except when located "
 "in a zone root record (RFC 6672, section 2.3)"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2325
+#: ipalib/plugins/dns.py:2348
 msgid "Add new DNS resource record."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2333
+#: ipalib/plugins/dns.py:2356
 msgid "force NS record creation even if its hostname is not in DNS"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2370
+#: ipalib/plugins/dns.py:2393
 msgid "Please choose a type of DNS resource record to be added"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2371
+#: ipalib/plugins/dns.py:2394
 #, python-format
 msgid "The most common types for this type of zone are: %s\n"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2376
+#: ipalib/plugins/dns.py:2399
 msgid "DNS resource record type"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2392
+#: ipalib/plugins/dns.py:2415
 #, python-format
 msgid "Invalid or unsupported type. Allowed values are: %s"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2420
+#: ipalib/plugins/dns.py:2443
 #, python-format
 msgid "Raw value of a DNS record was already set by \"%(name)s\" option"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2515
+#: ipalib/plugins/dns.py:2538
 msgid "Modify a DNS resource record."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2532
+#: ipalib/plugins/dns.py:2555
 msgid "DNS zone root record cannot be renamed"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2550
+#: ipalib/plugins/dns.py:2573
 msgid "DNS records can be only updated one at a time"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2630
+#: ipalib/plugins/dns.py:2653
 msgid "No option to modify specific record provided."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2633 ipalib/plugins/dns.py:2805
+#: ipalib/plugins/dns.py:2656 ipalib/plugins/dns.py:2828
 msgid "Current DNS record contents:\n"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2655
+#: ipalib/plugins/dns.py:2678
 #, python-format
 msgid "Modify %(name)s '%(value)s'?"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2663
+#: ipalib/plugins/dns.py:2686
 #, python-format
 msgid ""
 "%(count)d %(type)s record skipped. Only one value per DNS record type can be "
@@ -3564,110 +3563,110 @@ msgid_plural ""
 msgstr[0] ""
 msgstr[1] ""
 
-#: ipalib/plugins/dns.py:2675
+#: ipalib/plugins/dns.py:2698
 #, python-format
 msgid "Deleted record \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:2682
+#: ipalib/plugins/dns.py:2705
 msgid "Delete DNS resource record."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2686
+#: ipalib/plugins/dns.py:2709
 msgid ""
 "Neither --del-all nor options to delete a specific record provided.\n"
 "Command help may be consulted for all supported record types."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2692
+#: ipalib/plugins/dns.py:2715
 msgid "Delete all associated records"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2758
+#: ipalib/plugins/dns.py:2781
 #, python-format
 msgid "Zone record '%s' cannot be deleted"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2797
+#: ipalib/plugins/dns.py:2820
 msgid "No option to delete specific record provided."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2798
+#: ipalib/plugins/dns.py:2821
 msgid "Delete all?"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2826
+#: ipalib/plugins/dns.py:2849
 #, python-format
 msgid "Delete %(name)s '%(value)s'?"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2837
+#: ipalib/plugins/dns.py:2860
 msgid "Display DNS resource."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2854
+#: ipalib/plugins/dns.py:2877
 msgid "Search for DNS resources."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2889
+#: ipalib/plugins/dns.py:2912
 msgid "Resolve a host name in DNS."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2892
+#: ipalib/plugins/dns.py:2915
 #, python-format
 msgid "Found '%(value)s'"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2909
+#: ipalib/plugins/dns.py:2932
 #, python-format
 msgid "Host '%(host)s' not found"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2946
+#: ipalib/plugins/dns.py:2969
 msgid "DNS configuration options"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2952 ipalib/plugins/dns.py:2953
+#: ipalib/plugins/dns.py:2975 ipalib/plugins/dns.py:2976
 msgid "DNS Global Configuration"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2959
+#: ipalib/plugins/dns.py:2982
 msgid "Global forwarders"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2960
+#: ipalib/plugins/dns.py:2983
 msgid ""
 "Global forwarders. A custom port can be specified for each forwarder using a "
 "standard format \"IP_ADDRESS port PORT\""
 msgstr ""
 
-#: ipalib/plugins/dns.py:2967
+#: ipalib/plugins/dns.py:2990
 msgid ""
 "Global forwarding policy. Set to \"none\" to disable any configured global "
 "forwarders."
 msgstr ""
 
-#: ipalib/plugins/dns.py:2974
+#: ipalib/plugins/dns.py:2997
 msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2978
+#: ipalib/plugins/dns.py:3001
 msgid "Zone refresh interval"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2979
+#: ipalib/plugins/dns.py:3002
 msgid "An interval between regular polls of the name server for new DNS zones"
 msgstr ""
 
-#: ipalib/plugins/dns.py:2994
+#: ipalib/plugins/dns.py:3017
 msgid "Global DNS configuration is empty"
 msgstr ""
 
-#: ipalib/plugins/dns.py:3000
+#: ipalib/plugins/dns.py:3023
 msgid "Modify global DNS configuration."
 msgstr ""
 
-#: ipalib/plugins/dns.py:3011
+#: ipalib/plugins/dns.py:3034
 msgid "Show the current global DNS configuration."
 msgstr ""
 
@@ -4222,7 +4221,7 @@ msgstr ""
 msgid "Users"
 msgstr ""
 
-#: ipalib/plugins/hbacrule.py:194 ipalib/plugins/host.py:253
+#: ipalib/plugins/hbacrule.py:194 ipalib/plugins/host.py:254
 #: ipalib/plugins/internal.py:511 ipalib/plugins/selinuxusermap.py:199
 #: ipalib/plugins/sudorule.py:163
 msgid "Hosts"
@@ -4385,7 +4384,7 @@ msgid ""
 "\n"
 msgstr ""
 
-#: ipalib/plugins/hbacsvc.py:50 ipalib/plugins/hbacsvcgroup.py:49
+#: ipalib/plugins/hbacsvc.py:50 ipalib/plugins/hbacsvcgroup.py:45
 msgid "Host based access control commands"
 msgstr ""
 
@@ -4474,85 +4473,81 @@ msgid ""
 " Display information about a named group:\n"
 "   ipa hbacsvcgroup-show login\n"
 "\n"
-" Add a new group to the \"login\" group:\n"
-"   ipa hbacsvcgroup-add --desc=\"switch users\" login\n"
-"   ipa hbacsvcgroup-add-member --hbacsvcs=su --hbacsvcs=su-l login\n"
-"\n"
 " Delete an HBAC service group:\n"
 "   ipa hbacsvcgroup-del login\n"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:56
+#: ipalib/plugins/hbacsvcgroup.py:52
 msgid "HBAC service group"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:57
+#: ipalib/plugins/hbacsvcgroup.py:53
 msgid "HBAC service groups"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:65
+#: ipalib/plugins/hbacsvcgroup.py:61
 msgid "HBAC Service Groups"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:66
+#: ipalib/plugins/hbacsvcgroup.py:62
 msgid "HBAC Service Group"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:71
+#: ipalib/plugins/hbacsvcgroup.py:67
 msgid "Service group name"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:78
+#: ipalib/plugins/hbacsvcgroup.py:74
 msgid "HBAC service group description"
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:86
+#: ipalib/plugins/hbacsvcgroup.py:82
 msgid "Add a new HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:88
+#: ipalib/plugins/hbacsvcgroup.py:84
 #, python-format
 msgid "Added HBAC service group \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:94
+#: ipalib/plugins/hbacsvcgroup.py:90
 msgid "Delete an HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:96
+#: ipalib/plugins/hbacsvcgroup.py:92
 #, python-format
 msgid "Deleted HBAC service group \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:102
+#: ipalib/plugins/hbacsvcgroup.py:98
 msgid "Modify an HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:104
+#: ipalib/plugins/hbacsvcgroup.py:100
 #, python-format
 msgid "Modified HBAC service group \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:110
+#: ipalib/plugins/hbacsvcgroup.py:106
 msgid "Search for an HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:113
+#: ipalib/plugins/hbacsvcgroup.py:109
 #, python-format
 msgid "%(count)d HBAC service group matched"
 msgid_plural "%(count)d HBAC service groups matched"
 msgstr[0] ""
 msgstr[1] ""
 
-#: ipalib/plugins/hbacsvcgroup.py:120
+#: ipalib/plugins/hbacsvcgroup.py:116
 msgid "Display information about an HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:126
+#: ipalib/plugins/hbacsvcgroup.py:122
 msgid "Add members to an HBAC service group."
 msgstr ""
 
-#: ipalib/plugins/hbacsvcgroup.py:132
+#: ipalib/plugins/hbacsvcgroup.py:128
 msgid "Remove members from an HBAC service group."
 msgstr ""
 
@@ -4907,185 +4902,191 @@ msgstr ""
 msgid "hosts"
 msgstr ""
 
-#: ipalib/plugins/host.py:254 ipalib/plugins/internal.py:509
+#: ipalib/plugins/host.py:255 ipalib/plugins/internal.py:509
 #: ipalib/plugins/internal.py:556
 msgid "Host"
 msgstr ""
 
-#: ipalib/plugins/host.py:259
+#: ipalib/plugins/host.py:260
 msgid "Host name"
 msgstr ""
 
-#: ipalib/plugins/host.py:266
+#: ipalib/plugins/host.py:267
 msgid "A description of this host"
 msgstr ""
 
-#: ipalib/plugins/host.py:270
+#: ipalib/plugins/host.py:271
 msgid "Locality"
 msgstr ""
 
-#: ipalib/plugins/host.py:271
+#: ipalib/plugins/host.py:272
 msgid "Host locality (e.g. \"Baltimore, MD\")"
 msgstr ""
 
-#: ipalib/plugins/host.py:276
+#: ipalib/plugins/host.py:277
 msgid "Host location (e.g. \"Lab 2\")"
 msgstr ""
 
-#: ipalib/plugins/host.py:280
+#: ipalib/plugins/host.py:281
 msgid "Platform"
 msgstr ""
 
-#: ipalib/plugins/host.py:281
+#: ipalib/plugins/host.py:282
 msgid "Host hardware platform (e.g. \"Lenovo T61\")"
 msgstr ""
 
-#: ipalib/plugins/host.py:285
+#: ipalib/plugins/host.py:286
 msgid "Operating system"
 msgstr ""
 
-#: ipalib/plugins/host.py:286
+#: ipalib/plugins/host.py:287
 msgid "Host operating system and version (e.g. \"Fedora 9\")"
 msgstr ""
 
-#: ipalib/plugins/host.py:290
+#: ipalib/plugins/host.py:291
 msgid "User password"
 msgstr ""
 
-#: ipalib/plugins/host.py:291
+#: ipalib/plugins/host.py:292
 msgid "Password used in bulk enrollment"
 msgstr ""
 
-#: ipalib/plugins/host.py:294
+#: ipalib/plugins/host.py:295
 msgid "Generate a random password to be used in bulk enrollment"
 msgstr ""
 
-#: ipalib/plugins/host.py:299 ipalib/plugins/user.py:301
+#: ipalib/plugins/host.py:300 ipalib/plugins/user.py:301
 msgid "Random password"
 msgstr ""
 
-#: ipalib/plugins/host.py:305 ipalib/plugins/service.py:329
+#: ipalib/plugins/host.py:306 ipalib/plugins/service.py:329
 msgid "Base-64 encoded server certificate"
 msgstr ""
 
-#: ipalib/plugins/host.py:308 ipalib/plugins/host.py:618
+#: ipalib/plugins/host.py:309 ipalib/plugins/host.py:625
 msgid "Principal name"
 msgstr ""
 
-#: ipalib/plugins/host.py:316
+#: ipalib/plugins/host.py:317
 msgid "MAC address"
 msgstr ""
 
-#: ipalib/plugins/host.py:317
+#: ipalib/plugins/host.py:318
 msgid "Hardware MAC address(es) on this host"
 msgstr ""
 
-#: ipalib/plugins/host.py:321 ipalib/plugins/user.py:363
+#: ipalib/plugins/host.py:322 ipalib/plugins/user.py:363
 msgid "SSH public key"
 msgstr ""
 
-#: ipalib/plugins/host.py:381
+#: ipalib/plugins/host.py:330
+msgid ""
+"Host category (semantics placed on this attribute are for local "
+"interpretation)"
+msgstr ""
+
+#: ipalib/plugins/host.py:388
 msgid "Add a new host."
 msgstr ""
 
-#: ipalib/plugins/host.py:384
+#: ipalib/plugins/host.py:391
 #, python-format
 msgid "Added host \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/host.py:389
+#: ipalib/plugins/host.py:396
 msgid "force host name even if not in DNS"
 msgstr ""
 
-#: ipalib/plugins/host.py:392
+#: ipalib/plugins/host.py:399
 msgid "skip reverse DNS detection"
 msgstr ""
 
-#: ipalib/plugins/host.py:395
+#: ipalib/plugins/host.py:402
 msgid "Add the host to DNS with this IP address"
 msgstr ""
 
-#: ipalib/plugins/host.py:476
+#: ipalib/plugins/host.py:483
 #, python-format
 msgid "The host was added but the DNS update failed with: %(exc)s"
 msgstr ""
 
-#: ipalib/plugins/host.py:497
+#: ipalib/plugins/host.py:504
 msgid "Delete a host."
 msgstr ""
 
-#: ipalib/plugins/host.py:499
+#: ipalib/plugins/host.py:506
 #, python-format
 msgid "Deleted host \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/host.py:504
+#: ipalib/plugins/host.py:511
 msgid "Remove entries from DNS"
 msgstr ""
 
-#: ipalib/plugins/host.py:609
+#: ipalib/plugins/host.py:616
 msgid "Modify information about a host."
 msgstr ""
 
-#: ipalib/plugins/host.py:612
+#: ipalib/plugins/host.py:619
 #, python-format
 msgid "Modified host \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/host.py:619
+#: ipalib/plugins/host.py:626
 msgid "Kerberos principal name for this host"
 msgstr ""
 
-#: ipalib/plugins/host.py:623
+#: ipalib/plugins/host.py:630
 msgid "Update DNS entries"
 msgstr ""
 
-#: ipalib/plugins/host.py:636
+#: ipalib/plugins/host.py:643
 msgid "Password cannot be set on enrolled host."
 msgstr ""
 
-#: ipalib/plugins/host.py:640
+#: ipalib/plugins/host.py:647
 msgid "cn is immutable"
 msgstr ""
 
-#: ipalib/plugins/host.py:759
+#: ipalib/plugins/host.py:766
 msgid "Search for hosts."
 msgstr ""
 
-#: ipalib/plugins/host.py:763
+#: ipalib/plugins/host.py:770
 #, python-format
 msgid "%(count)d host matched"
 msgid_plural "%(count)d hosts matched"
 msgstr[0] ""
 msgstr[1] ""
 
-#: ipalib/plugins/host.py:845
+#: ipalib/plugins/host.py:852
 msgid "Display information about a host."
 msgstr ""
 
-#: ipalib/plugins/host.py:850 ipalib/plugins/service.py:560
+#: ipalib/plugins/host.py:857 ipalib/plugins/service.py:560
 msgid "file to store certificate in"
 msgstr ""
 
-#: ipalib/plugins/host.py:882 ipalib/plugins/service.py:580
+#: ipalib/plugins/host.py:889 ipalib/plugins/service.py:580
 #, python-format
 msgid "Certificate stored in file '%(file)s'"
 msgstr ""
 
-#: ipalib/plugins/host.py:893
+#: ipalib/plugins/host.py:900
 msgid "Disable the Kerberos key, SSL certificate and all services of a host."
 msgstr ""
 
-#: ipalib/plugins/host.py:896
+#: ipalib/plugins/host.py:903
 #, python-format
 msgid "Disabled host \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/host.py:989
+#: ipalib/plugins/host.py:996
 msgid "Add hosts that can manage this host."
 msgstr ""
 
-#: ipalib/plugins/host.py:1004
+#: ipalib/plugins/host.py:1011
 msgid "Remove hosts that can manage this host."
 msgstr ""
 
@@ -6697,7 +6698,7 @@ msgstr ""
 msgid "Secondary RID base"
 msgstr ""
 
-#: ipalib/plugins/internal.py:539 ipalib/plugins/trust.py:135
+#: ipalib/plugins/internal.py:539 ipalib/plugins/trust.py:141
 msgid "Active Directory domain"
 msgstr ""
 
@@ -6705,8 +6706,8 @@ msgstr ""
 msgid "Local domain"
 msgstr ""
 
-#: ipalib/plugins/internal.py:543 ipalib/plugins/realmdomains.py:61
-#: ipalib/plugins/realmdomains.py:62
+#: ipalib/plugins/internal.py:543 ipalib/plugins/realmdomains.py:65
+#: ipalib/plugins/realmdomains.py:66
 msgid "Realm Domains"
 msgstr ""
 
@@ -6846,8 +6847,8 @@ msgstr ""
 msgid "Trust Settings"
 msgstr ""
 
-#: ipalib/plugins/internal.py:618 ipalib/plugins/realmdomains.py:68
-#: ipalib/plugins/trust.py:562
+#: ipalib/plugins/internal.py:618 ipalib/plugins/realmdomains.py:73
+#: ipalib/plugins/trust.py:568
 msgid "Domain"
 msgstr ""
 
@@ -6855,11 +6856,11 @@ msgstr ""
 msgid "Establish using"
 msgstr ""
 
-#: ipalib/plugins/internal.py:620 ipalib/plugins/trust.py:202
+#: ipalib/plugins/internal.py:620 ipalib/plugins/trust.py:208
 msgid "Domain NetBIOS name"
 msgstr ""
 
-#: ipalib/plugins/internal.py:621 ipalib/plugins/trust.py:206
+#: ipalib/plugins/internal.py:621 ipalib/plugins/trust.py:212
 msgid "Domain Security Identifier"
 msgstr ""
 
@@ -6867,15 +6868,15 @@ msgstr ""
 msgid "Pre-shared password"
 msgstr ""
 
-#: ipalib/plugins/internal.py:623 ipalib/plugins/trust.py:127
+#: ipalib/plugins/internal.py:623 ipalib/plugins/trust.py:133
 msgid "Trust direction"
 msgstr ""
 
-#: ipalib/plugins/internal.py:624 ipalib/plugins/trust.py:131
+#: ipalib/plugins/internal.py:624 ipalib/plugins/trust.py:137
 msgid "Trust status"
 msgstr ""
 
-#: ipalib/plugins/internal.py:625 ipalib/plugins/trust.py:129
+#: ipalib/plugins/internal.py:625 ipalib/plugins/trust.py:135
 msgid "Trust type"
 msgstr ""
 
@@ -7055,7 +7056,7 @@ msgstr ""
 msgid "Sudo"
 msgstr ""
 
-#: ipalib/plugins/internal.py:690 ipalib/plugins/trust.py:191
+#: ipalib/plugins/internal.py:690 ipalib/plugins/trust.py:197
 msgid "Trusts"
 msgstr ""
 
@@ -8278,47 +8279,47 @@ msgid ""
 "   ipa realmdomains-mod --del-domain=olddomain.com\n"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:57
+#: ipalib/plugins/realmdomains.py:61
 msgid "Realm domains"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:73
+#: ipalib/plugins/realmdomains.py:79
 msgid "Add domain"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:78
+#: ipalib/plugins/realmdomains.py:85
 msgid "Delete domain"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:86
+#: ipalib/plugins/realmdomains.py:93
 msgid "Modify realm domains."
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:91
+#: ipalib/plugins/realmdomains.py:98
 msgid "Force adding domain even if not in DNS"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:104
+#: ipalib/plugins/realmdomains.py:111
 msgid ""
 "you cannot specify the --domain option together with --add-domain or --del-"
 "domain"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:106 ipalib/plugins/realmdomains.py:126
+#: ipalib/plugins/realmdomains.py:113 ipalib/plugins/realmdomains.py:133
 msgid "cannot delete domain of IPA server"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:111
+#: ipalib/plugins/realmdomains.py:118
 #, python-format
 msgid "no SOA or NS records found for domains: %s"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:120
+#: ipalib/plugins/realmdomains.py:127
 #, python-format
 msgid "no SOA or NS records found for domain %s"
 msgstr ""
 
-#: ipalib/plugins/realmdomains.py:140
+#: ipalib/plugins/realmdomains.py:190
 msgid "Display the list of realm domains."
 msgstr ""
 
@@ -9409,7 +9410,7 @@ msgstr ""
 msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\""
 msgstr ""
 
-#: ipalib/plugins/trust.py:42
+#: ipalib/plugins/trust.py:48
 msgid ""
 "\n"
 "Cross-realm trusts\n"
@@ -9510,72 +9511,72 @@ msgid ""
 "\"\n"
 msgstr ""
 
-#: ipalib/plugins/trust.py:134
+#: ipalib/plugins/trust.py:140
 msgid "Non-Active Directory domain"
 msgstr ""
 
-#: ipalib/plugins/trust.py:136
+#: ipalib/plugins/trust.py:142
 msgid "RFC4120-compliant Kerberos realm"
 msgstr ""
 
-#: ipalib/plugins/trust.py:137
+#: ipalib/plugins/trust.py:143
 msgid "Trusting forest"
 msgstr ""
 
-#: ipalib/plugins/trust.py:138
+#: ipalib/plugins/trust.py:144
 msgid "Trusted forest"
 msgstr ""
 
-#: ipalib/plugins/trust.py:139
+#: ipalib/plugins/trust.py:145
 msgid "Two-way trust"
 msgstr ""
 
-#: ipalib/plugins/trust.py:140
+#: ipalib/plugins/trust.py:146
 msgid "Established and verified"
 msgstr ""
 
-#: ipalib/plugins/trust.py:141
+#: ipalib/plugins/trust.py:147
 msgid "Waiting for confirmation by remote side"
 msgstr ""
 
-#: ipalib/plugins/trust.py:142
+#: ipalib/plugins/trust.py:148
 msgid "Unknown"
 msgstr ""
 
-#: ipalib/plugins/trust.py:146
+#: ipalib/plugins/trust.py:152
 msgid "Trust type (ad for Active Directory, default)"
 msgstr ""
 
-#: ipalib/plugins/trust.py:181
+#: ipalib/plugins/trust.py:187
 msgid "trust"
 msgstr ""
 
-#: ipalib/plugins/trust.py:182
+#: ipalib/plugins/trust.py:188
 msgid "trusts"
 msgstr ""
 
-#: ipalib/plugins/trust.py:192
+#: ipalib/plugins/trust.py:198
 msgid "Trust"
 msgstr ""
 
-#: ipalib/plugins/trust.py:197 ipa-client/ipa-rmkeytab.c:176
+#: ipalib/plugins/trust.py:203 ipa-client/ipa-rmkeytab.c:176
 msgid "Realm name"
 msgstr ""
 
-#: ipalib/plugins/trust.py:211
+#: ipalib/plugins/trust.py:217
 msgid "SID blacklist incoming"
 msgstr ""
 
-#: ipalib/plugins/trust.py:216
+#: ipalib/plugins/trust.py:222
 msgid "SID blacklist outgoing"
 msgstr ""
 
-#: ipalib/plugins/trust.py:233
+#: ipalib/plugins/trust.py:239
 #, python-format
 msgid "invalid SID: %(value)s"
 msgstr ""
 
-#: ipalib/plugins/trust.py:243
+#: ipalib/plugins/trust.py:249
 msgid ""
 "\n"
 "Add new trust to use.\n"
@@ -9592,106 +9593,106 @@ msgid ""
 "    "
 msgstr ""
 
-#: ipalib/plugins/trust.py:261
+#: ipalib/plugins/trust.py:267
 msgid "Active Directory domain administrator"
 msgstr ""
 
-#: ipalib/plugins/trust.py:265
+#: ipalib/plugins/trust.py:271
 msgid "Active directory domain administrator's password"
 msgstr ""
 
-#: ipalib/plugins/trust.py:270
+#: ipalib/plugins/trust.py:276
 msgid "Domain controller for the Active Directory domain (optional)"
 msgstr ""
 
-#: ipalib/plugins/trust.py:274
+#: ipalib/plugins/trust.py:280
 msgid "Shared secret for the trust"
 msgstr ""
 
-#: ipalib/plugins/trust.py:279
+#: ipalib/plugins/trust.py:285
 msgid "First Posix ID of the range reserved for the trusted domain"
 msgstr ""
 
-#: ipalib/plugins/trust.py:283
+#: ipalib/plugins/trust.py:289
 msgid "Size of the ID range reserved for the trusted domain"
 msgstr ""
 
-#: ipalib/plugins/trust.py:289
+#: ipalib/plugins/trust.py:295
 #, python-format
 msgid "Added Active Directory trust for realm \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/trust.py:294
+#: ipalib/plugins/trust.py:300
 msgid "missing base_id"
 msgstr ""
 
-#: ipalib/plugins/trust.py:295
+#: ipalib/plugins/trust.py:301
 msgid "pysss_murmur is not available on the server and no base-id is given."
 msgstr ""
 
-#: ipalib/plugins/trust.py:302 ipalib/plugins/trust.py:304
+#: ipalib/plugins/trust.py:308 ipalib/plugins/trust.py:310
 msgid "trust type"
 msgstr ""
 
-#: ipalib/plugins/trust.py:302
+#: ipalib/plugins/trust.py:308
 msgid "only \"ad\" is supported"
 msgstr ""
 
-#: ipalib/plugins/trust.py:339
+#: ipalib/plugins/trust.py:345
 msgid "range exists"
 msgstr ""
 
-#: ipalib/plugins/trust.py:340
+#: ipalib/plugins/trust.py:346
 msgid ""
 "ID range with the same name but different domain SID already exists. The ID "
 "range for the new trusted domain must be created manually."
 msgstr ""
 
-#: ipalib/plugins/trust.py:361 ipalib/plugins/trust.py:372
-#: ipalib/plugins/trust.py:390 ipalib/plugins/trust.py:395
-#: ipalib/plugins/trust.py:426 ipalib/plugins/trust.py:442
+#: ipalib/plugins/trust.py:367 ipalib/plugins/trust.py:378
+#: ipalib/plugins/trust.py:396 ipalib/plugins/trust.py:401
+#: ipalib/plugins/trust.py:432 ipalib/plugins/trust.py:448
 msgid "AD Trust setup"
 msgstr ""
 
-#: ipalib/plugins/trust.py:362
+#: ipalib/plugins/trust.py:368
 msgid ""
 "Cannot perform join operation without Samba 4 support installed.\n"
 "                              Make sure you have installed server-trust-ad "
 "sub-package of IPA"
 msgstr ""
 
-#: ipalib/plugins/trust.py:373
+#: ipalib/plugins/trust.py:379
 msgid ""
 "Cannot perform join operation without own domain configured.\n"
 "                              Make sure you have run ipa-adtrust-install on "
 "the IPA server first"
 msgstr ""
 
-#: ipalib/plugins/trust.py:378
+#: ipalib/plugins/trust.py:384
 #, python-format
 msgid "Re-established trust to domain \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/trust.py:391
+#: ipalib/plugins/trust.py:397
 msgid "Trusted domain and administrator account use different realms"
 msgstr ""
 
-#: ipalib/plugins/trust.py:395
+#: ipalib/plugins/trust.py:401
 msgid "Realm administrator password should be specified"
 msgstr ""
 
-#: ipalib/plugins/trust.py:401
+#: ipalib/plugins/trust.py:407
 #, python-format
 msgid "Unable to resolve domain controller for '%s' domain. "
 msgstr ""
 
-#: ipalib/plugins/trust.py:407
+#: ipalib/plugins/trust.py:413
 msgid ""
 "Forward policy is defined for it in IPA DNS, perhaps forwarder points to "
 "incorrect host?"
 msgstr ""
 
-#: ipalib/plugins/trust.py:410
+#: ipalib/plugins/trust.py:416
 #, python-format
 msgid ""
 "IPA manages DNS, please verify your DNS configuration and make sure that "
@@ -9700,31 +9701,31 @@ msgid ""
 "documentation. "
 msgstr ""
 
-#: ipalib/plugins/trust.py:420
+#: ipalib/plugins/trust.py:426
 #, python-format
 msgid ""
 "Since IPA does not manage DNS records, ensure DNS is configured to resolve "
 "'%(domain)s' domain from IPA hosts and back."
 msgstr ""
 
-#: ipalib/plugins/trust.py:427
+#: ipalib/plugins/trust.py:433
 msgid "Unable to verify write permissions to the AD"
 msgstr ""
 
-#: ipalib/plugins/trust.py:443
+#: ipalib/plugins/trust.py:449
 msgid "Not enough arguments specified to perform trust setup"
 msgstr ""
 
-#: ipalib/plugins/trust.py:446
+#: ipalib/plugins/trust.py:452
 msgid "Delete a trust."
 msgstr ""
 
-#: ipalib/plugins/trust.py:448
+#: ipalib/plugins/trust.py:454
 #, python-format
 msgid "Deleted trust \"%(value)s\""
 msgstr ""
 
-#: ipalib/plugins/trust.py:459
+#: ipalib/plugins/trust.py:465
 msgid ""
 "\n"
 "    Modify a trust (for future use).\n"
@@ -9734,67 +9735,83 @@ msgid ""
 "    "
 msgstr ""
 
-#: ipalib/plugins/trust.py:466
+#: ipalib/plugins/trust.py:472
 #, python-format
 msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)"
 msgstr ""
 
-#: ipalib/plugins/trust.py:483
+#: ipalib/plugins/trust.py:489
 msgid "Search for trusts."
 msgstr ""
 
-#: ipalib/plugins/trust.py:487
+#: ipalib/plugins/trust.py:493
 #, python-format
 msgid "%(count)d trust matched"
 msgid_plural "%(count)d trusts matched"
 msgstr[0] ""
 msgstr[1] ""
 
-#: ipalib/plugins/trust.py:507
+#: ipalib/plugins/trust.py:513
 msgid "Display information about a trust."
 msgstr ""
 
-#: ipalib/plugins/trust.py:551
+#: ipalib/plugins/trust.py:557
 msgid "trust configuration"
 msgstr ""
 
-#: ipalib/plugins/trust.py:557 ipalib/plugins/trust.py:558
+#: ipalib/plugins/trust.py:563 ipalib/plugins/trust.py:564
 msgid "Global Trust Configuration"
 msgstr ""
 
-#: ipalib/plugins/trust.py:566
+#: ipalib/plugins/trust.py:572
 msgid "Security Identifier"
 msgstr ""
 
-#: ipalib/plugins/trust.py:570
+#: ipalib/plugins/trust.py:576
 msgid "NetBIOS name"
 msgstr ""
 
-#: ipalib/plugins/trust.py:574
+#: ipalib/plugins/trust.py:580
 msgid "Domain GUID"
 msgstr ""
 
-#: ipalib/plugins/trust.py:579
+#: ipalib/plugins/trust.py:585
 msgid "Fallback primary group"
 msgstr ""
 
-#: ipalib/plugins/trust.py:591
+#: ipalib/plugins/trust.py:597
 msgid "unsupported trust type"
 msgstr ""
 
-#: ipalib/plugins/trust.py:654
+#: ipalib/plugins/trust.py:660
 msgid "Modify global trust configuration."
 msgstr ""
 
-#: ipalib/plugins/trust.py:657
+#: ipalib/plugins/trust.py:663
 #, python-format
 msgid "Modified \"%(value)s\" trust configuration"
 msgstr ""
 
-#: ipalib/plugins/trust.py:676
+#: ipalib/plugins/trust.py:682
 msgid "Show global trust configuration."
 msgstr ""
 
+#: ipalib/plugins/trust.py:708
+msgid "Resolve security identifiers of users and groups in trusted domains"
+msgstr ""
+
+#: ipalib/plugins/trust.py:712
+msgid "Security Identifiers (SIDs)"
+msgstr ""
+
+#: ipalib/plugins/trust.py:718
+msgid "Name"
+msgstr ""
+
+#: ipalib/plugins/trust.py:719
+msgid "SID"
+msgstr ""
+
 #: ipalib/plugins/user.py:41
 msgid ""
 "\n"
@@ -10224,11 +10241,11 @@ msgstr ""
 msgid "options are not allowed"
 msgstr ""
 
-#: ipalib/x509.py:205
+#: ipalib/x509.py:204
 msgid "improperly formatted DER-encoded certificate"
 msgstr ""
 
-#: ipalib/x509.py:243
+#: ipalib/x509.py:241
 #, python-format
 msgid "Issuer \"%(issuer)s\" does not match the expected issuer"
 msgstr ""
@@ -10395,7 +10412,7 @@ msgid ""
 "the IPA server and the remote domain cannot share the same NetBIOS name: %s"
 msgstr ""
 
-#: ipaserver/install/certs.py:874
+#: ipaserver/install/certs.py:661
 #, python-format
 msgid "Unable to communicate with CMS (%s)"
 msgstr ""
@@ -10404,6 +10421,10 @@ msgstr ""
 msgid "Unable to communicate with CMS"
 msgstr ""
 
+#: ipaserver/plugins/dogtag.py:1834
+msgid "find not supported on CAs upgraded from 9 to 10"
+msgstr ""
+
 #: ipaserver/plugins/join.py:59
 msgid "The hostname to register as"
 msgstr ""
@@ -10427,35 +10448,6 @@ msgid ""
 "'%s'."
 msgstr ""
 
-#: ipaserver/plugins/selfsign.py:98
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-
-#: ipaserver/plugins/selfsign.py:103
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr ""
-
-#: ipaserver/plugins/selfsign.py:124 ipaserver/plugins/selfsign.py:139
-msgid "file operation"
-msgstr ""
-
-#: ipaserver/plugins/selfsign.py:153
-msgid "cannot obtain next serial number"
-msgstr ""
-
-#: ipaserver/plugins/selfsign.py:188
-msgid "certutil failure"
-msgstr ""
-
-#: ipaserver/plugins/selfsign.py:212
-#, python-format
-msgid "Unable to decode certificate in entry: %s"
-msgstr ""
-
 #: ipaserver/rpcserver.py:538
 msgid "Request must be a dict"
 msgstr ""
diff --git a/install/po/ja.po b/install/po/ja.po
index edd7fc85c..66da2fa0a 100644
--- a/install/po/ja.po
+++ b/install/po/ja.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Tomoyuki KATO <tomo@dream.daynight.jp>, 2012.
-#   <www.carrotsoft@gmail.com>, 2011.
+# Tomoyuki KATO <tomo@dream.daynight.jp>, 2012
+# 高一人参 @欠陥遺伝子 <www.carrotsoft@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Japanese <trans-ja@lists.fedoraproject.org>\n"
+"Language: ja\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ja\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
 #, python-format
diff --git a/install/po/kn.po b/install/po/kn.po
index fac50152a..4fa78a68c 100644
--- a/install/po/kn.po
+++ b/install/po/kn.po
@@ -3,22 +3,22 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# gundachandru <gundachandru@gmail.com>, 2010.
-# jdennis <jdennis@redhat.com>, 2011.
+# Chandru <gundachandru@gmail.com>, 2010
+# jdennis <jdennis@redhat.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Kannada (http://www.transifex.com/projects/p/fedora/language/"
 "kn/)\n"
+"Language: kn\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: kn\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
 #, python-format
@@ -713,24 +713,3 @@ msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸ
 #, python-format
 msgid "Unable to communicate with CMS (%s)"
 msgstr "CMS (%s) ಜೊತೆ ಸಂಪರ್ಕಿಸಲು ಸಾಧ್ಯವಾಗುತ್ತಿಲ್ಲ"
-
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"ಕೋರಿಕೆ ವಿಷಯ \"%(request_subject)s\" ಸ್ವರೂಪ \"%(subject_base)s\" ಕ್ಕೆ "
-"ಹೊಂದಿಕೆಯಾಗುತ್ತಿಲ್ಲ"
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "csr ವನ್ನು ಡಿಕೋಡ್ ಮಾಡಲು ಸಾಧ್ಯವಾಗುತ್ತಿಲ್ಲ: %s"
-
-msgid "file operation"
-msgstr "ಕಡತದ ಕಾರ್ಯಾಚರಣೆ"
-
-msgid "cannot obtain next serial number"
-msgstr "ಮುಂದಿನ ಸೀರಿಯಲ್ ನಂಬರ್ ಅನ್ನು ಪಡೆಯಲು ಆಗುತ್ತಿಲ್ಲ"
-
-msgid "certutil failure"
-msgstr "certutil ವಿಫಲತೆ"
diff --git a/install/po/nl.po b/install/po/nl.po
index 735d10a10..ed75561a6 100644
--- a/install/po/nl.po
+++ b/install/po/nl.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Geert Warrink <geert.warrink@onsnet.nu>, 2011.
+# Geert Warrink <geert.warrink@onsnet.nu>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/"
 "nl/)\n"
+"Language: nl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: nl\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #, c-format
diff --git a/install/po/pl.po b/install/po/pl.po
index 09cdacb42..6e0fe1503 100644
--- a/install/po/pl.po
+++ b/install/po/pl.po
@@ -3,22 +3,22 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# jdennis <jdennis@redhat.com>, 2011.
-# Mateusz Marzantowicz <mmarzantowicz@osdf.com.pl>, 2013.
-# Piotr Drąg <piotrdrag@gmail.com>, 2010,2013.
+# jdennis <jdennis@redhat.com>, 2011
+# mmarzantowicz <mmarzantowicz@osdf.com.pl>, 2013
+# Piotr Drąg <piotrdrag@gmail.com>, 2010,2013
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Polish <trans-pl@lists.fedoraproject.org>\n"
+"Language: pl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: pl\n"
 "Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
 "|| n%100>=20) ? 1 : 2);\n"
 
@@ -1280,27 +1280,6 @@ msgstr "Platforma sprzętowa komputera (np. Lenovo T61)"
 msgid "Operating System and version of the host (e.g. Fedora 9)"
 msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)"
 
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"Temat żądania \"%(request_subject)s\" nie pasuje do formatu "
-"\"%(subject_base)s\""
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "nie można dekodować csr: %s"
-
-msgid "file operation"
-msgstr "działanie na pliku"
-
-msgid "cannot obtain next serial number"
-msgstr "nie można uzyskać następnego numeru szeregowego"
-
-msgid "certutil failure"
-msgstr "narzędzie certyfikatów nie powiodło się"
-
 #, c-format
 msgid "cannot open configuration file %s\n"
 msgstr "nie można otworzyć pliku konfiguracji %s\n"
diff --git a/install/po/ru.po b/install/po/ru.po
index a9a1e5d5d..943f32e94 100644
--- a/install/po/ru.po
+++ b/install/po/ru.po
@@ -3,23 +3,23 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Alexander Ivanov <hrafn@hrafn.me>, 2011.
-# Andrew Martynov <andrewm@inventa.ru>, 2010.
-# Azamat H. Hackimov <azamat.hackimov@gmail.com>, 2012.
-# jdennis <jdennis@redhat.com>, 2011.
+# Alexander Ivanov <hrafn@hrafn.me>, 2011
+# Andrew Martynov <andrewm@inventa.ru>, 2010
+# Azamat Hackimov <azamat.hackimov@gmail.com>, 2012
+# jdennis <jdennis@redhat.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Russian <trans-ru@lists.fedoraproject.org>\n"
+"Language: ru\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ru\n"
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
@@ -1120,27 +1120,6 @@ msgstr "Аппаратная платформа узла (например, Leno
 msgid "Operating System and version of the host (e.g. Fedora 9)"
 msgstr "Операционная система и версия узла (например, Fedora 9)"
 
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"Заголовок запроса «%(request_subject)s» не совпадает с формой "
-"«%(subject_base)s»"
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "невозможно декодировать CSR: %s"
-
-msgid "file operation"
-msgstr "операция над файлом"
-
-msgid "cannot obtain next serial number"
-msgstr "невозможно получить следующий порядковый номер"
-
-msgid "certutil failure"
-msgstr "ошибка certutil"
-
 #, c-format
 msgid "cannot open configuration file %s\n"
 msgstr "невозможно открыть конфигурационный файл %s\n"
diff --git a/install/po/tg.po b/install/po/tg.po
index 9e5e42fbf..eafdc3d1f 100644
--- a/install/po/tg.po
+++ b/install/po/tg.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Petr Viktorin <encukou@gmail.com>, 2012.
+# Petr Viktorin <encukou@gmail.com>, 2012
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Tajik (http://www.transifex.com/projects/p/fedora/language/"
 "tg/)\n"
+"Language: tg\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: tg\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #, c-format
diff --git a/install/po/uk.po b/install/po/uk.po
index aebe070a0..015e33c4b 100644
--- a/install/po/uk.po
+++ b/install/po/uk.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# jdennis <jdennis@redhat.com>, 2011.
-# Yuri Chornoivan <yurchor@ukr.net>, 2011-2013.
+# jdennis <jdennis@redhat.com>, 2011
+# Yuri Chornoivan <yurchor@ukr.net>, 2011-2013
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
-"Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 08:09+0000\n"
+"Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
+"Language: uk\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: uk\n"
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
@@ -177,6 +177,10 @@ msgid "Could not get %(name)s interactively"
 msgstr "Не вдалося отримати %(name)s у інтерактивному режимі"
 
 #, python-format
+msgid "Command '%(name)s' has been deprecated"
+msgstr "Команда «%(name)s» вважається застарілою"
+
+#, python-format
 msgid "%(reason)s"
 msgstr "%(reason)s"
 
@@ -518,6 +522,9 @@ msgstr "має бути одним з таких значень: %(values)s"
 msgid "incomplete time value"
 msgstr "неповне часове значення"
 
+msgid "this option is deprecated"
+msgstr "цей параметр вважається застарілим"
+
 msgid "A list of ACI values"
 msgstr "Список значень ACI"
 
@@ -1795,9 +1802,8 @@ msgid ""
 "(CSR)\n"
 "in PEM format.\n"
 "\n"
-"If using the selfsign back end then the subject in the CSR needs to match\n"
-"the subject configured in the server. The dogtag CA uses just the CN\n"
-"value of the CSR and forces the rest of the subject.\n"
+"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n"
+"subject to values configured in the server.\n"
 "\n"
 "A certificate is stored with a service principal and a service principal\n"
 "needs a host.\n"
@@ -1938,16 +1944,16 @@ msgstr ""
 "\n"
 "Передбачено підтримку таких причин відкликання:\n"
 "\n"
-"    * 0 - unspecified\n"
-"    * 1 - keyCompromise\n"
-"    * 2 - cACompromise\n"
-"    * 3 - affiliationChanged\n"
-"    * 4 - superseded\n"
-"    * 5 - cessationOfOperation\n"
-"    * 6 - certificateHold\n"
-"    * 8 - removeFromCRL\n"
-"    * 9 - privilegeWithdrawn\n"
-"    * 10 - aACompromise\n"
+"* 0 - unspecified\n"
+" * 1 - keyCompromise\n"
+" * 2 - cACompromise\n"
+" * 3 - affiliationChanged\n"
+" * 4 - superseded\n"
+" * 5 - cessationOfOperation\n"
+" * 6 - certificateHold\n"
+" * 8 - removeFromCRL\n"
+" * 9 - privilegeWithdrawn\n"
+" * 10 - aACompromise\n"
 "\n"
 "Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC "
 "5280:\n"
@@ -4165,6 +4171,105 @@ msgstr "заборонено змінювати записи груп"
 msgid "Not a managed group"
 msgstr "Не є керованою групою"
 
+msgid ""
+"\n"
+"Host-based access control\n"
+"\n"
+"Control who can access what services on what hosts. You\n"
+"can use HBAC to control which users or groups can\n"
+"access a service, or group of services, on a target host.\n"
+"\n"
+"You can also specify a category of users and target hosts.\n"
+"This is currently limited to \"all\", but might be expanded in the\n"
+"future.\n"
+"\n"
+"Target hosts in HBAC rules must be hosts managed by IPA.\n"
+"\n"
+"The available services and groups of services are controlled by the\n"
+"hbacsvc and hbacsvcgroup plug-ins respectively.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+" Create a rule, \"test1\", that grants all users access to the host \"server"
+"\" from\n"
+" anywhere:\n"
+"   ipa hbacrule-add --usercat=all test1\n"
+"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
+"\n"
+" Display the properties of a named HBAC rule:\n"
+"   ipa hbacrule-show test1\n"
+"\n"
+" Create a rule for a specific service. This lets the user john access\n"
+" the sshd service on any machine from any machine:\n"
+"   ipa hbacrule-add --hostcat=all john_sshd\n"
+"   ipa hbacrule-add-user --users=john john_sshd\n"
+"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
+"\n"
+" Create a rule for a new service group. This lets the user john access\n"
+" the FTP service on any machine from any machine:\n"
+"   ipa hbacsvcgroup-add ftpers\n"
+"   ipa hbacsvc-add sftp\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
+"   ipa hbacrule-add --hostcat=all john_ftp\n"
+"   ipa hbacrule-add-user --users=john john_ftp\n"
+"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
+"\n"
+" Disable a named HBAC rule:\n"
+"   ipa hbacrule-disable test1\n"
+"\n"
+" Remove a named HBAC rule:\n"
+"   ipa hbacrule-del allow_server\n"
+msgstr ""
+"\n"
+"Керування доступом на основі вузлів\n"
+"\n"
+"Керуйте тим, хто, з яких вузлів зможе отримувати доступ\n"
+"до певних служб. Ви можете скористатися HBAC для визначення\n"
+"користувачів і груп на вузлі походження запиту зможе отримувати\n"
+"доступ до певної служби або групи служб.\n"
+"\n"
+"Ви також можете визначити категорію користувачів та вузли призначення.\n"
+"У поточній версії можливі варіанти\n"
+"обмежено варіантом \"all\", але перелік варіантів може бути\n"
+"розширено у майбутніх версіях.\n"
+"\n"
+"Вузли призначення та вузли походження у правилах HBAC мають бути\n"
+"вузлами, керованими IPA.\n"
+"\n"
+"Доступними службами і групами служб є служби, керовані hbacsvc\n"
+"та додатками hbacsvcgroup, відповідно.\n"
+"\n"
+"ПРИКЛАДИ:\n"
+"\n"
+" Створення правила \"test1\", яке надає всім користувачам доступ\n"
+" до вузла \"server\" звідусюди:\n"
+"   ipa hbacrule-add --usercat=all test1\n"
+"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
+"\n"
+" Показ властивостей вказаного правила HBAC:\n"
+"   ipa hbacrule-show test1\n"
+"\n"
+" Створення правила для певної служби. Це правило надасть користувачу john\n"
+" доступ до служби sshd у будь-якій системі звідусіль:\n"
+"   ipa hbacrule-add --hostcat=all john_sshd\n"
+"   ipa hbacrule-add-user --users=john john_sshd\n"
+"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
+"\n"
+" Створення правила для нової групи служб. Користувачу john\n"
+" надається доступ до служби FTP у будь-якій системі звідусіль:\n"
+"   ipa hbacsvcgroup-add ftpers\n"
+"   ipa hbacsvc-add sftp\n"
+"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
+"   ipa hbacrule-add --type=allow --hostcat=all john_ftp\n"
+"   ipa hbacrule-add-user --users=john john_ftp\n"
+"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
+"\n"
+" Вимикання вказаного правила HBAC:\n"
+"   ipa hbacrule-disable test1\n"
+"\n"
+" Вилучення вказаного правила HBAC:\n"
+"   ipa hbacrule-del allow_server\n"
+
 msgid "Host-based access control commands"
 msgstr "Команди керування доступом на основі вузлів"
 
@@ -4441,10 +4546,6 @@ msgid ""
 " Display information about a named group:\n"
 "   ipa hbacsvcgroup-show login\n"
 "\n"
-" Add a new group to the \"login\" group:\n"
-"   ipa hbacsvcgroup-add --desc=\"switch users\" login\n"
-"   ipa hbacsvcgroup-add-member --hbacsvcs=su --hbacsvcs=su-l login\n"
-"\n"
 " Delete an HBAC service group:\n"
 "   ipa hbacsvcgroup-del login\n"
 msgstr ""
@@ -4465,10 +4566,6 @@ msgstr ""
 " Показ даних щодо вказаної групи:\n"
 "   ipa hbacsvcgroup-show login\n"
 "\n"
-" Додавання нової групи до групи \"login\":\n"
-"   ipa hbacsvcgroup-add --desc=\"switch users\" login\n"
-"   ipa hbacsvcgroup-add-member --hbacsvcs=su --hbacsvcs=su-l login\n"
-"\n"
 " Вилучення групи служб HBAC:\n"
 "   ipa hbacsvcgroup-del login\n"
 
@@ -4530,6 +4627,390 @@ msgstr "Додати учасників до групи служб HBAC."
 msgid "Remove members from an HBAC service group."
 msgstr "Вилучити учасників з групи служб HBAC."
 
+msgid ""
+"\n"
+"Simulate use of Host-based access controls\n"
+"\n"
+"HBAC rules control who can access what services on what hosts.\n"
+"You can use HBAC to control which users or groups can access a service,\n"
+"or group of services, on a target host.\n"
+"\n"
+"Since applying HBAC rules implies use of a production environment,\n"
+"this plugin aims to provide simulation of HBAC rules evaluation without\n"
+"having access to the production environment.\n"
+"\n"
+" Test user coming to a service on a named host against\n"
+" existing enabled rules.\n"
+"\n"
+" ipa hbactest --user= --host= --service=\n"
+"              [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n"
+"              [--sizelimit= ]\n"
+"\n"
+" --user, --host, and --service are mandatory, others are optional.\n"
+"\n"
+" If --rules is specified simulate enabling of the specified rules and test\n"
+" the login of the user using only these rules.\n"
+"\n"
+" If --enabled is specified, all enabled HBAC rules will be added to "
+"simulation\n"
+"\n"
+" If --disabled is specified, all disabled HBAC rules will be added to "
+"simulation\n"
+"\n"
+" If --nodetail is specified, do not return information about rules matched/"
+"not matched.\n"
+"\n"
+" If both --rules and --enabled are specified, apply simulation to --rules "
+"_and_\n"
+" all IPA enabled rules.\n"
+"\n"
+" If no --rules specified, simulation is run against all IPA enabled rules.\n"
+" By default there is a IPA-wide limit to number of entries fetched, you can "
+"change it\n"
+" with --sizelimit option.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+"    1. Use all enabled HBAC rules in IPA database to simulate:\n"
+"    $ ipa  hbactest --user=a1a --host=bar --service=sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Not matched rules: my-second-rule\n"
+"      Not matched rules: my-third-rule\n"
+"      Not matched rules: myrule\n"
+"      Matched rules: allow_all\n"
+"\n"
+"    2. Disable detailed summary of how rules were applied:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"\n"
+"    3. Test explicitly specified HBAC rules:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
+"          --rules=myrule --rules=my-second-rule\n"
+"    ---------------------\n"
+"    Access granted: False\n"
+"    ---------------------\n"
+"      Not matched rules: my-second-rule\n"
+"      Not matched rules: myrule\n"
+"\n"
+"    4. Use all enabled HBAC rules in IPA database + explicitly specified "
+"rules:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
+"          --rules=myrule --rules=my-second-rule --enabled\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Not matched rules: my-second-rule\n"
+"      Not matched rules: my-third-rule\n"
+"      Not matched rules: myrule\n"
+"      Matched rules: allow_all\n"
+"\n"
+"    5. Test all disabled HBAC rules in IPA database:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n"
+"    ---------------------\n"
+"    Access granted: False\n"
+"    ---------------------\n"
+"      Not matched rules: new-rule\n"
+"\n"
+"    6. Test all disabled HBAC rules in IPA database + explicitly specified "
+"rules:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
+"          --rules=myrule --rules=my-second-rule --disabled\n"
+"    ---------------------\n"
+"    Access granted: False\n"
+"    ---------------------\n"
+"      Not matched rules: my-second-rule\n"
+"      Not matched rules: my-third-rule\n"
+"      Not matched rules: myrule\n"
+"\n"
+"    7. Test all (enabled and disabled) HBAC rules in IPA database:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
+"          --enabled --disabled\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Not matched rules: my-second-rule\n"
+"      Not matched rules: my-third-rule\n"
+"      Not matched rules: myrule\n"
+"      Not matched rules: new-rule\n"
+"      Matched rules: allow_all\n"
+"\n"
+"\n"
+"HBACTEST AND TRUSTED DOMAINS\n"
+"\n"
+"When an external trusted domain is configured in IPA, HBAC rules are also "
+"applied\n"
+"on users accessing IPA resources from the trusted domain. Trusted domain "
+"users and\n"
+"groups (and their SIDs) can be then assigned to external groups which can "
+"be\n"
+"members of POSIX groups in IPA which can be used in HBAC rules and thus "
+"allowing\n"
+"access to resources protected by the HBAC system.\n"
+"\n"
+"hbactest plugin is capable of testing access for both local IPA users and "
+"users\n"
+"from the trusted domains, either by a fully qualified user name or by user "
+"SID.\n"
+"Such user names need to have a trusted domain specified as a short name\n"
+"(DOMAIN\\Administrator) or with a user principal name (UPN), "
+"Administrator@ad.test.\n"
+"\n"
+"Please note that hbactest executed with a trusted domain user as --user "
+"parameter\n"
+"can be only run by members of \"trust admins\" group.\n"
+"\n"
+"EXAMPLES:\n"
+"\n"
+"    1. Test if a user from a trusted domain specified by its shortname "
+"matches any\n"
+"       rule:\n"
+"\n"
+"    $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --"
+"service sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Matched rules: allow_all\n"
+"      Matched rules: can_login\n"
+"\n"
+"    2. Test if a user from a trusted domain specified by its domain name "
+"matches\n"
+"       any rule:\n"
+"\n"
+"    $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --"
+"service sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Matched rules: allow_all\n"
+"      Matched rules: can_login\n"
+"\n"
+"    3. Test if a user from a trusted domain specified by its SID matches any "
+"rule:\n"
+"\n"
+"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
+"            --host `hostname` --service sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Matched rules: allow_all\n"
+"      Matched rules: can_login\n"
+"\n"
+"    4. Test if other user from a trusted domain specified by its SID matches "
+"any rule:\n"
+"\n"
+"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
+"            --host `hostname` --service sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Matched rules: allow_all\n"
+"      Matched rules: can_login\n"
+"\n"
+"   5. Test if other user from a trusted domain specified by its shortname "
+"matches\n"
+"       any rule:\n"
+"\n"
+"    $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service "
+"sshd\n"
+"    --------------------\n"
+"    Access granted: True\n"
+"    --------------------\n"
+"      Matched rules: allow_all\n"
+"      Not matched rules: can_login\n"
+msgstr ""
+"\n"
+"Імітація використання керування доступом на основі вузлів (HBAC)\n"
+"\n"
+"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n"
+"певних вузлах.\n"
+"Ви можете скористатися HBAC для керування тим, які користувачі або групи\n"
+"на початковому вузлі можуть отримувати доступ до служби або групи служб\n"
+"на вузлі призначення\n"
+"\n"
+"Оскільки застосування правил HBAC передбачає використання робочого\n"
+"середовища, це додаток призначено для імітації обробки правил HBAC без\n"
+"доступу до реального середовища\n"
+"\n"
+" Перевірити відповідність користувача з початкового вузла до служби на "
+"іменованому\n"
+" вузлі правилам уможливлення доступу.\n"
+"\n"
+" ipa hbactest --user= --host= --service=\n"
+"              [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n"
+"              [--sizelimit= ]\n"
+"\n"
+" --user, --host і --service є обов’язковими, інші можна не вказувати.\n"
+"\n"
+" Якщо вказано --rules, імітувати вмикання вказаних правил і перевірити\n"
+" можливість входу користувача у разі використання лише цих правил.\n"
+"\n"
+" Якщо вказано --enabled, додати всі увімкнені правила HBAC до імітації\n"
+"\n"
+" Якщо вказано --disabled, додати всі вимкнені правила HBAC до імітації\n"
+"\n"
+" Якщо вказано --nodetail, не повертати даних щодо відповідних і "
+"невідповідних\n"
+" правил.\n"
+"\n"
+" Якщо вказано одночасно --rules і --enabled, виконати імітацію --rules _і_\n"
+" всіх увімкнених правил IPA.\n"
+"\n"
+" Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил "
+"IPA.\n"
+"\n"
+"ПРИКЛАДИ:\n"
+"\n"
+"    1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n"
+"    $ ipa  hbactest --user=a1a --srchost=foo --host=bar --service=sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      невідповідне: my-second-rule\n"
+"      невідповідне: my-third-rule\n"
+"      невідповідне: myrule\n"
+"      відповідне: allow_all\n"
+"\n"
+"    2. Вимикання докладного резюме застосування правил:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"\n"
+"    3. Перевірити явно вказані правила HBAC:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd           --rules=my-"
+"second-rule,myrule\n"
+"    ---------------------\n"
+"    Надано доступ: Ні\n"
+"    ---------------------\n"
+"      невідповідне: my-second-rule\n"
+"      невідповідне: myrule\n"
+"\n"
+"    4. Використання всіх увімкнених правил HBAC у базі даних IPA + явно "
+"вказаних правил:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd           --rules=my-"
+"second-rule,myrule --enabled\n"
+"    --------------------\n"
+"    Доступ надано: Так\n"
+"    --------------------\n"
+"      невідповідне: my-second-rule\n"
+"      невідповідне: my-third-rule\n"
+"      невідповідне: myrule\n"
+"      відповідне: allow_all\n"
+"\n"
+"    5. Перевірка всіх вимкнених правил HBAC у базі даних IPA:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n"
+"    ---------------------\n"
+"    Надано доступ: Ні\n"
+"    ---------------------\n"
+"      невідповідне: new-rule\n"
+"\n"
+"    6. Перевірка всіх вимкнених правил HBAC у базі даних IPA + явно вказані "
+"правила:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd           --rules=my-"
+"second-rule,myrule --disabled\n"
+"    ---------------------\n"
+"    Надано доступ: Ні\n"
+"    ---------------------\n"
+"      невідповідне: my-second-rule\n"
+"      невідповідне: my-third-rule\n"
+"      невідповідне: myrule\n"
+"\n"
+"    7. Перевірка всіх (увімкнених і вимкнених) правил HBAC у базі даних "
+"IPA:\n"
+"    $ ipa hbactest --user=a1a --host=bar --service=sshd           --enabled "
+"--disabled\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      невідповідне: my-second-rule\n"
+"      невідповідне: my-third-rule\n"
+"      невідповідне: myrule\n"
+"      невідповідне: new-rule\n"
+"      відповідне: allow_all\n"
+"\n"
+"\n"
+"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n"
+"\n"
+"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n"
+"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n"
+"з довіреного домену. Після цього користувачі і групи довіреного домену\n"
+"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n"
+"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n"
+"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n"
+"HBAC.\n"
+"\n"
+"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n"
+"IPA, так і користувачів з довірених доменів, як за повним іменем\n"
+"користувача, так і за SID користувачів. У таких іменах користувачів\n"
+"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n"
+"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n"
+"\n"
+"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n"
+"довіреного домену у параметрі --user можуть виконувати лише учасники\n"
+"групи «trust admins».\n"
+"\n"
+"ПРИКЛАД:\n"
+"\n"
+"    1. Перевірити, чи відповідає користувач з довіреного домену,\n"
+"       вказаний за коротким іменем, якомусь правилу:\n"
+"\n"
+"    $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --"
+"service sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      Відповідні правила: allow_all\n"
+"      Відповідні правила: can_login\n"
+"\n"
+"    2. Перевірити, чи відповідає користувач з довіреного домену,\n"
+"       вказаний за назвою його домену, якомусь правилу:\n"
+"\n"
+"    $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --"
+"service sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      Відповідні правила: allow_all\n"
+"      Відповідні правила: can_login\n"
+"\n"
+"    3. Перевірити, чи відповідає користувач з довіреного домену\n"
+"       вказаний за SID, якомусь правилу:\n"
+"\n"
+"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
+"            --host `hostname` --service sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      Відповідні правила: allow_all\n"
+"      Відповідні правила: can_login\n"
+"\n"
+"    4. Перевірити, чи відповідає інший користувач з довіреного домену,\n"
+"       вказаний за SID, якомусь правилу:\n"
+"\n"
+"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
+"            --host `hostname` --service sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      Відповідні правила: allow_all\n"
+"      Відповідні правила: can_login\n"
+"\n"
+"   5. Перевірити, чи відповідає інший користувач з довіреного домену,\n"
+"      вказаний за коротким ім’ям, якомусь правилу:\n"
+"\n"
+"    $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service "
+"sshd\n"
+"    --------------------\n"
+"    Надано доступ: Так\n"
+"    --------------------\n"
+"      Відповідні правила: allow_all\n"
+"      Невідповідні правила: can_login\n"
+
 msgid "Simulate use of Host-based access controls"
 msgstr "Імітувати використання керування доступом на основі вузлів"
 
@@ -4785,6 +5266,13 @@ msgstr "Апаратні MAC-адреси цього вузла"
 msgid "SSH public key"
 msgstr "Відкритий ключ SSH"
 
+msgid ""
+"Host category (semantics placed on this attribute are for local "
+"interpretation)"
+msgstr ""
+"Категорія вузлів (семантика розташування цього атрибуту призначена для "
+"локальної обробки)"
+
 msgid "Add a new host."
 msgstr "Додати новий запис вузла."
 
@@ -9770,6 +10258,19 @@ msgstr "Змінено налаштування довіри «%(value)s»"
 msgid "Show global trust configuration."
 msgstr "Показати налаштування довіри на загальному рівні."
 
+msgid "Resolve security identifiers of users and groups in trusted domains"
+msgstr ""
+"Визначати ідентифікатори безпеки користувачів та груп у довірених доменах"
+
+msgid "Security Identifiers (SIDs)"
+msgstr "Ідентифікатори безпеки (SID)"
+
+msgid "Name"
+msgstr "Назва"
+
+msgid "SID"
+msgstr "SID"
+
 msgid ""
 "\n"
 "Users\n"
@@ -10368,6 +10869,9 @@ msgstr "Не вдалося обмінятися даними з CMS (%s)"
 msgid "Unable to communicate with CMS"
 msgstr "Не вдалося обмінятися даними з CMS"
 
+msgid "find not supported on CAs upgraded from 9 to 10"
+msgstr "знайти непідтримувані у CA після оновлення з 9 до 10"
+
 msgid "The hostname to register as"
 msgstr "Назва вузла для реєстрації"
 
@@ -10387,31 +10891,6 @@ msgid ""
 msgstr ""
 "Недостатні права доступу «write» до атрибута «krbLastPwdChange» запису «%s»."
 
-#, python-format
-msgid ""
-"Request subject \"%(request_subject)s\" does not match the form "
-"\"%(subject_base)s\""
-msgstr ""
-"Об’єкт запиту «%(request_subject)s» вказано у формі, відмінній від "
-"«%(subject_base)s»"
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "не вдалося декодувати csr: %s"
-
-msgid "file operation"
-msgstr "дія над файлами"
-
-msgid "cannot obtain next serial number"
-msgstr "не вдалося отримати наступний серійний номер"
-
-msgid "certutil failure"
-msgstr "помилка certutil"
-
-#, python-format
-msgid "Unable to decode certificate in entry: %s"
-msgstr "Не вдалося розкодувати сертифікат у запису: %s"
-
 msgid "Request must be a dict"
 msgstr "Запит має належати до типу словника (dict)"
 
diff --git a/install/po/zh_CN.po b/install/po/zh_CN.po
index a445c225c..7f1c6ee23 100644
--- a/install/po/zh_CN.po
+++ b/install/po/zh_CN.po
@@ -3,21 +3,21 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Jake Li <gnozil@gmail.com>, 2010.
-# jdennis <jdennis@redhat.com>, 2011.
+# Jake Li <gnozil@gmail.com>, 2010
+# jdennis <jdennis@redhat.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: FreeIPA\n"
-"Report-Msgid-Bugs-To: https://bugzilla.redhat.com/enter_bug.cgi?"
-"product=freeIPA\n"
-"POT-Creation-Date: 2013-04-15 16:42+0200\n"
-"PO-Revision-Date: 2013-04-15 15:12+0000\n"
+"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
+"newticket\n"
+"POT-Creation-Date: 2013-05-09 17:50+0200\n"
+"PO-Revision-Date: 2013-05-07 07:53+0000\n"
 "Last-Translator: Petr Viktorin <encukou@gmail.com>\n"
 "Language-Team: Chinese (China) <trans-zh_cn@lists.fedoraproject.org>\n"
+"Language: zh_CN\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: zh_CN\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
 #, python-format
@@ -392,13 +392,3 @@ msgstr "已删除用户\"%(value)s\""
 #, python-format
 msgid "Modified user \"%(value)s\""
 msgstr "已修改用户\"%(value)s\""
-
-#, python-format
-msgid "unable to decode csr: %s"
-msgstr "不能解码csr: %s"
-
-msgid "file operation"
-msgstr "文件操作"
-
-msgid "cannot obtain next serial number"
-msgstr "无法得到下一个序列号"