# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR Red Hat
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: ipa\n"
"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
"newticket\n"
"POT-Creation-Date: 2014-07-07 15:24+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"

#: ipalib/cli.py:599
#, python-format
msgid "Enter %(label)s again to verify: "
msgstr ""

#: ipalib/cli.py:607 ipa-client/ipa-getkeytab.c:739
#, c-format
msgid "Passwords do not match!"
msgstr ""

#: ipalib/cli.py:630
msgid "No matching entries found"
msgstr ""

#: ipalib/cli.py:674
msgid "Topic or Command"
msgstr ""

#: ipalib/cli.py:675
msgid "The topic or command name."
msgstr ""

#: ipalib/cli.py:844
msgid "Topic commands:"
msgstr ""

#: ipalib/cli.py:849
msgid "To get command help, use:"
msgstr ""

#: ipalib/cli.py:850
msgid "  ipa <command> --help"
msgstr ""

#: ipalib/cli.py:859
msgid "Command name"
msgstr ""

#: ipalib/cli.py:1027
msgid "Positional arguments"
msgstr ""

#: ipalib/cli.py:1175
#, python-format
msgid "Same as --%s"
msgstr ""

#: ipalib/cli.py:1178
msgid "Deprecated options"
msgstr ""

#: ipalib/cli.py:1300
msgid "No file to read"
msgstr ""

#: ipalib/crud.py:247
msgid "A string searched in all relevant object attributes"
msgstr ""

#: ipalib/errors.py:270
#, python-format
msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'"
msgstr ""

#: ipalib/errors.py:288
#, python-format
msgid "unknown error %(code)d from %(server)s: %(error)s"
msgstr ""

#: ipalib/errors.py:304
msgid "an internal error has occurred"
msgstr ""

#: ipalib/errors.py:326
#, python-format
msgid "an internal error has occurred on server at '%(server)s'"
msgstr ""

#: ipalib/errors.py:342
#, python-format
msgid "unknown command '%(name)s'"
msgstr ""

#: ipalib/errors.py:359 ipalib/errors.py:384
#, python-format
msgid "error on server '%(server)s': %(error)s"
msgstr ""

#: ipalib/errors.py:375
#, python-format
msgid "cannot connect to '%(uri)s': %(error)s"
msgstr ""

#: ipalib/errors.py:393
#, python-format
msgid "Invalid JSON-RPC request: %(error)s"
msgstr ""

#: ipalib/errors.py:409
#, python-format
msgid "error marshalling data for XML-RPC transport: %(error)s"
msgstr ""

#: ipalib/errors.py:425
#, python-format
msgid "Missing or invalid HTTP Referer, %(referer)s"
msgstr ""

#: ipalib/errors.py:452
#, python-format
msgid "Kerberos error: %(major)s/%(minor)s"
msgstr ""

#: ipalib/errors.py:469
msgid "did not receive Kerberos credentials"
msgstr ""

#: ipalib/errors.py:485
#, python-format
msgid "Service '%(service)s' not found in Kerberos database"
msgstr ""

#: ipalib/errors.py:501
msgid "No credentials cache found"
msgstr ""

#: ipalib/errors.py:517
msgid "Ticket expired"
msgstr ""

#: ipalib/errors.py:533
msgid "Credentials cache permissions incorrect"
msgstr ""

#: ipalib/errors.py:549
msgid "Bad format in credentials cache"
msgstr ""

#: ipalib/errors.py:565
msgid "Cannot resolve KDC for requested realm"
msgstr ""

#: ipalib/errors.py:577
msgid "Session error"
msgstr ""

#: ipalib/errors.py:585
#, python-format
msgid "Principal %(principal)s cannot be authenticated: %(message)s"
msgstr ""

#: ipalib/errors.py:603
#, python-format
msgid "Insufficient access: %(info)s"
msgstr ""

#: ipalib/errors.py:647
#, python-format
msgid "command '%(name)s' takes no arguments"
msgstr ""

#: ipalib/errors.py:667
#, python-format
msgid "command '%(name)s' takes at most %(count)d argument"
msgid_plural "command '%(name)s' takes at most %(count)d arguments"
msgstr[0] ""
msgstr[1] ""

#: ipalib/errors.py:697
#, python-format
msgid "overlapping arguments and options: %(names)s"
msgstr ""

#: ipalib/errors.py:713
#, python-format
msgid "'%(name)s' is required"
msgstr ""

#: ipalib/errors.py:729 ipalib/errors.py:745
#, python-format
msgid "invalid '%(name)s': %(error)s"
msgstr ""

#: ipalib/errors.py:761
#, python-format
msgid "api has no such namespace: '%(name)s'"
msgstr ""

#: ipalib/errors.py:770
msgid "Passwords do not match"
msgstr ""

#: ipalib/errors.py:779
msgid "Command not implemented"
msgstr ""

#: ipalib/errors.py:788
msgid "Client is not configured. Run ipa-client-install."
msgstr ""

#: ipalib/errors.py:797
#, python-format
msgid "Could not get %(name)s interactively"
msgstr ""

#: ipalib/errors.py:812
#, python-format
msgid "Command '%(name)s' has been deprecated"
msgstr ""

#: ipalib/errors.py:840 ipalib/errors.py:1080 ipalib/errors.py:1174
#: ipalib/errors.py:1605 ipalib/errors.py:1622
#, python-format
msgid "%(reason)s"
msgstr ""

#: ipalib/errors.py:856
msgid "This entry already exists"
msgstr ""

#: ipalib/errors.py:872
msgid "You must enroll a host in order to create a host service"
msgstr ""

#: ipalib/errors.py:888
#, python-format
msgid ""
"Service principal is not of the form: service/fully-qualified host name: "
"%(reason)s"
msgstr ""

#: ipalib/errors.py:904
msgid ""
"The realm for the principal does not match the realm for this IPA server"
msgstr ""

#: ipalib/errors.py:920
msgid "This command requires root access"
msgstr ""

#: ipalib/errors.py:936
msgid "This is already a posix group"
msgstr ""

#: ipalib/errors.py:952
#, python-format
msgid "Principal is not of the form user@REALM: '%(principal)s'"
msgstr ""

#: ipalib/errors.py:968
msgid "This entry is already enabled"
msgstr ""

#: ipalib/errors.py:984
msgid "This entry is already disabled"
msgstr ""

#: ipalib/errors.py:1000
msgid "This entry cannot be enabled or disabled"
msgstr ""

#: ipalib/errors.py:1016
msgid "This entry is not a member"
msgstr ""

#: ipalib/errors.py:1032
msgid "A group may not be a member of itself"
msgstr ""

#: ipalib/errors.py:1048
msgid "This entry is already a member"
msgstr ""

#: ipalib/errors.py:1064
#, python-format
msgid "Base64 decoding failed: %(reason)s"
msgstr ""

#: ipalib/errors.py:1096
msgid "A group may not be added as a member of itself"
msgstr ""

#: ipalib/errors.py:1112
msgid "The default users group cannot be removed"
msgstr ""

#: ipalib/errors.py:1128
msgid "Host does not have corresponding DNS A record"
msgstr ""

#: ipalib/errors.py:1143
msgid "Deleting a managed group is not allowed. It must be detached first."
msgstr ""

#: ipalib/errors.py:1158
msgid "A managed group cannot have a password policy."
msgstr ""

#: ipalib/errors.py:1190
#, python-format
msgid "'%(entry)s' doesn't have a certificate."
msgstr ""

#: ipalib/errors.py:1206
#, python-format
msgid "Unable to create private group. A group '%(group)s' already exists."
msgstr ""

#: ipalib/errors.py:1222
#, python-format
msgid ""
"A problem was encountered when verifying that all members were %(verb)s: "
"%(exc)s"
msgstr ""

#: ipalib/errors.py:1240
#, python-format
msgid "%(attr)s does not contain '%(value)s'"
msgstr ""

#: ipalib/errors.py:1257
#, python-format
msgid ""
"The search criteria was not specific enough. Expected 1 and found %(found)d."
msgstr ""

#: ipalib/errors.py:1274
msgid "This group already allows external members"
msgstr ""

#: ipalib/errors.py:1291
msgid "This group cannot be posix because it is external"
msgstr ""

#: ipalib/errors.py:1308
msgid "This is already a posix group and cannot be converted to external one"
msgstr ""

#: ipalib/errors.py:1331
#, python-format
msgid "no command nor help topic '%(topic)s'"
msgstr ""

#: ipalib/errors.py:1355
msgid "change collided with another change"
msgstr ""

#: ipalib/errors.py:1371
msgid "no modifications to be performed"
msgstr ""

#: ipalib/errors.py:1387
#, python-format
msgid "%(desc)s: %(info)s"
msgstr ""

#: ipalib/errors.py:1403
msgid "limits exceeded for this query"
msgstr ""

#: ipalib/errors.py:1418
#, python-format
msgid "%(info)s"
msgstr ""

#: ipalib/errors.py:1433
msgid "modifying primary key is not allowed"
msgstr ""

#: ipalib/errors.py:1449
#, python-format
msgid "%(attr)s: Only one value allowed."
msgstr ""

#: ipalib/errors.py:1465
#, python-format
msgid "%(attr)s: Invalid syntax."
msgstr ""

#: ipalib/errors.py:1481
#, python-format
msgid "Bad search filter %(info)s"
msgstr ""

#: ipalib/errors.py:1497
msgid "Not allowed on non-leaf entry"
msgstr ""

#: ipalib/errors.py:1513
msgid "LDAP timeout"
msgstr ""

#: ipalib/errors.py:1531
#, python-format
msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}"
msgstr ""

#: ipalib/errors.py:1547
#, python-format
msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'"
msgstr ""

#: ipalib/errors.py:1572
#, python-format
msgid "Certificate operation cannot be completed: %(error)s"
msgstr ""

#: ipalib/errors.py:1588
#, python-format
msgid "Certificate format error: %(error)s"
msgstr ""

#: ipalib/errors.py:1639
msgid "Already registered"
msgstr ""

#: ipalib/errors.py:1655
msgid "Not registered yet"
msgstr ""

#: ipalib/errors.py:1671
#, python-format
msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it"
msgstr ""

#: ipalib/errors.py:1687
#, python-format
msgid ""
"%(key)s cannot be deleted or disabled because it is the last member of "
"%(label)s %(container)s"
msgstr ""

#: ipalib/errors.py:1703
#, python-format
msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s"
msgstr ""

#: ipalib/errors.py:1720
#, python-format
msgid "%(name)s certificate is not valid"
msgstr ""

#: ipalib/frontend.py:412
msgid "Results are truncated, try a more specific search"
msgstr ""

#: ipalib/frontend.py:535
#, python-format
msgid "Unknown option: %(option)s"
msgstr ""

#: ipalib/frontend.py:898
msgid ""
"Retrieve and print all attributes from the server. Affects command output."
msgstr ""

#: ipalib/frontend.py:904
msgid "Print entries as stored on the server. Only affects output format."
msgstr ""

#: ipalib/frontend.py:910 ipalib/plugins/batch.py:73
msgid "Client version. Used to determine if server will accept request."
msgstr ""

#: ipalib/frontend.py:1087
msgid "Forward to server instead of running locally"
msgstr ""

#: ipalib/messages.py:73
msgid "Additional instructions:"
msgstr ""

#: ipalib/messages.py:134
#, python-format
msgid ""
"API Version number was not sent, forward compatibility not guaranteed. "
"Assuming server's API version, %(server_version)s"
msgstr ""

#: ipalib/messages.py:146
msgid ""
"DNS forwarder semantics changed since IPA 4.0.\n"
"You may want to use forward zones (dnsforwardzone-*) instead.\n"
"For more details read the docs."
msgstr ""

#: ipalib/messages.py:158
#, python-format
msgid ""
"DNSSEC support is experimental.\n"
"%(additional_info)s"
msgstr ""

#: ipalib/output.py:93
msgid "A dictionary representing an LDAP entry"
msgstr ""

#: ipalib/output.py:101
msgid "A list of LDAP entries"
msgstr ""

#: ipalib/output.py:153
msgid "All commands should at least have a result"
msgstr ""

#: ipalib/output.py:156
msgid "User-friendly description of action performed"
msgstr ""

#: ipalib/output.py:160
msgid "The primary_key value of the entry, e.g. 'jdoe' for a user"
msgstr ""

#: ipalib/output.py:175
msgid "Number of entries returned"
msgstr ""

#: ipalib/output.py:176
msgid "True if not all results were returned"
msgstr ""

#: ipalib/output.py:181 ipalib/output.py:187
msgid "List of deletions that failed"
msgstr ""

#: ipalib/output.py:193 ipalib/plugins/dns.py:308
msgid "True means the operation was successful"
msgstr ""

#: ipalib/parameters.py:382
msgid "incorrect type"
msgstr ""

#: ipalib/parameters.py:385
msgid "Only one value is allowed"
msgstr ""

#: ipalib/parameters.py:953
msgid "must be True or False"
msgstr ""

#: ipalib/parameters.py:1055
msgid "must be an integer"
msgstr ""

#: ipalib/parameters.py:1103
#, python-format
msgid "must be at least %(minvalue)d"
msgstr ""

#: ipalib/parameters.py:1113
#, python-format
msgid "can be at most %(maxvalue)d"
msgstr ""

#: ipalib/parameters.py:1129
msgid "must be a decimal number"
msgstr ""

#: ipalib/parameters.py:1175
#, python-format
msgid "must be at least %(minvalue)s"
msgstr ""

#: ipalib/parameters.py:1185
#, python-format
msgid "can be at most %(maxvalue)s"
msgstr ""

#: ipalib/parameters.py:1193
#, python-format
msgid ""
"number class '%(cls)s' is not included in a list of allowed number classes: "
"%(allowed)s"
msgstr ""

#: ipalib/parameters.py:1317
#, python-format
msgid "must match pattern \"%(pattern)s\""
msgstr ""

#: ipalib/parameters.py:1335
msgid "must be binary data"
msgstr ""

#: ipalib/parameters.py:1351
#, python-format
msgid "must be at least %(minlength)d bytes"
msgstr ""

#: ipalib/parameters.py:1361
#, python-format
msgid "can be at most %(maxlength)d bytes"
msgstr ""

#: ipalib/parameters.py:1371
#, python-format
msgid "must be exactly %(length)d bytes"
msgstr ""

#: ipalib/parameters.py:1401
msgid "must be Unicode text"
msgstr ""

#: ipalib/parameters.py:1434
msgid "Leading and trailing spaces are not allowed"
msgstr ""

#: ipalib/parameters.py:1442
#, python-format
msgid "must be at least %(minlength)d characters"
msgstr ""

#: ipalib/parameters.py:1452
#, python-format
msgid "can be at most %(maxlength)d characters"
msgstr ""

#: ipalib/parameters.py:1462
#, python-format
msgid "must be exactly %(length)d characters"
msgstr ""

#: ipalib/parameters.py:1483
#, python-format
msgid "The character %(char)r is not allowed."
msgstr ""

#: ipalib/parameters.py:1534
#, python-format
msgid "must be '%(value)s'"
msgstr ""

#: ipalib/parameters.py:1537
#, python-format
msgid "must be one of %(values)s"
msgstr ""

#: ipalib/parameters.py:1647
msgid "must be datetime value"
msgstr ""

#: ipalib/parameters.py:1661
msgid "does not match any of accepted formats: "
msgstr ""

#: ipalib/parameters.py:1846
msgid "incomplete time value"
msgstr ""

#: ipalib/parameters.py:1883
msgid "this option is deprecated"
msgstr ""

#: ipalib/parameters.py:1936
msgid "must be DNS name"
msgstr ""

#: ipalib/parameters.py:1955
msgid "invalid escape code in domain name"
msgstr ""

#: ipalib/parameters.py:1957 ipalib/util.py:240
msgid "empty DNS label"
msgstr ""

#: ipalib/parameters.py:1959
msgid "domain name cannot be longer than 255 characters"
msgstr ""

#: ipalib/parameters.py:1961
msgid "DNS label cannot be longer than 63 characters"
msgstr ""

#: ipalib/parameters.py:1963
msgid "invalid domain name"
msgstr ""

#: ipalib/parameters.py:1975
#, python-format
msgid "domain name '%(domain)s' should be normalized to: %(normalized)s"
msgstr ""

#: ipalib/parameters.py:1991
msgid "must be absolute"
msgstr ""

#: ipalib/parameters.py:1995
msgid "must be relative"
msgstr ""

#: ipalib/plugins/aci.py:157
msgid "A list of ACI values"
msgstr ""

#: ipalib/plugins/aci.py:221
msgid "type, filter, subtree and targetgroup are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:224
msgid "ACI prefix is required"
msgstr ""

#: ipalib/plugins/aci.py:227
msgid ""
"at least one of: type, filter, subtree, targetgroup, attrs or memberof are "
"required"
msgstr ""

#: ipalib/plugins/aci.py:230
msgid "filter and memberof are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:236
msgid "group, permission and self are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:238
msgid "One of group, permission or self is required"
msgstr ""

#: ipalib/plugins/aci.py:261
#, python-format
msgid "Group '%s' does not exist"
msgstr ""

#: ipalib/plugins/aci.py:287
msgid "empty filter"
msgstr ""

#: ipalib/plugins/aci.py:308
#, python-format
msgid "Syntax Error: %(error)s"
msgstr ""

#: ipalib/plugins/aci.py:354
#, python-format
msgid "invalid DN (%s)"
msgstr ""

#: ipalib/plugins/aci.py:401
#, python-format
msgid "ACI with name \"%s\" not found"
msgstr ""

#: ipalib/plugins/aci.py:419
msgid "ACI prefix"
msgstr ""

#: ipalib/plugins/aci.py:420
msgid ""
"Prefix used to distinguish ACI types (permission, delegation, selfservice, "
"none)"
msgstr ""

#: ipalib/plugins/aci.py:433
msgid "ACIs"
msgstr ""

#: ipalib/plugins/aci.py:438
msgid "ACI name"
msgstr ""

#: ipalib/plugins/aci.py:444 ipalib/plugins/permission.py:219
msgid "Permission"
msgstr ""

#: ipalib/plugins/aci.py:445
msgid "Permission ACI grants access to"
msgstr ""

#: ipalib/plugins/aci.py:450 ipalib/plugins/delegation.py:105
msgid "User group"
msgstr ""

#: ipalib/plugins/aci.py:451 ipalib/plugins/delegation.py:106
msgid "User group ACI grants access to"
msgstr ""

#: ipalib/plugins/aci.py:456 ipalib/plugins/baseldap.py:67
#: ipalib/plugins/delegation.py:87 ipalib/plugins/permission.py:218
#: ipalib/plugins/selfservice.py:91
msgid "Permissions"
msgstr ""

#: ipalib/plugins/aci.py:457
msgid "Permissions to grant(read, write, add, delete, all)"
msgstr ""

#: ipalib/plugins/aci.py:465
msgid "Attributes to which the permission applies"
msgstr ""

#: ipalib/plugins/aci.py:466 ipalib/plugins/delegation.py:93
#: ipalib/plugins/selfservice.py:97
msgid "Attributes"
msgstr ""

#: ipalib/plugins/aci.py:472 ipalib/plugins/otptoken.py:141
#: ipalib/plugins/permission.py:315
msgid "Type"
msgstr ""

#: ipalib/plugins/aci.py:473
msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)"
msgstr ""

#: ipalib/plugins/aci.py:479
msgid "Member of"
msgstr ""

#: ipalib/plugins/aci.py:480
msgid "Member of a group"
msgstr ""

#: ipalib/plugins/aci.py:485 ipalib/plugins/internal.py:206
msgid "Filter"
msgstr ""

#: ipalib/plugins/aci.py:486
msgid "Legal LDAP filter (e.g. ou=Engineering)"
msgstr ""

#: ipalib/plugins/aci.py:491 ipalib/plugins/permission.py:277
msgid "Subtree"
msgstr ""

#: ipalib/plugins/aci.py:492
msgid "Subtree to apply ACI to"
msgstr ""

#: ipalib/plugins/aci.py:497 ipalib/plugins/permission.py:309
msgid "Target group"
msgstr ""

#: ipalib/plugins/aci.py:498
msgid "Group to apply ACI to"
msgstr ""

#: ipalib/plugins/aci.py:503
msgid "Target your own entry (self)"
msgstr ""

#: ipalib/plugins/aci.py:504
msgid "Apply ACI to your own entry (self)"
msgstr ""

#: ipalib/plugins/aci.py:516
#, python-format
msgid "Created ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:521
msgid "Test the ACI syntax but don't write anything"
msgstr ""

#: ipalib/plugins/aci.py:571
#, python-format
msgid "Deleted ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:613 ipalib/plugins/aci.py:888
#: ipalib/plugins/aci.py:934 ipalib/plugins/delegation.py:62
#: ipalib/plugins/permission.py:112 ipalib/plugins/selfservice.py:63
msgid "ACI"
msgstr ""

#: ipalib/plugins/aci.py:621
#, python-format
msgid "Modified ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:695
#, python-format
msgid "%(count)d ACI matched"
msgid_plural "%(count)d ACIs matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/aci.py:895
msgid "Location of the ACI"
msgstr ""

#: ipalib/plugins/aci.py:941
msgid "New ACI name"
msgstr ""

#: ipalib/plugins/aci.py:945
#, python-format
msgid "Renamed ACI to \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:30
msgid ""
"\n"
"Auto Membership Rule.\n"
msgstr ""

#: ipalib/plugins/automember.py:32
msgid ""
"\n"
"Bring clarity to the membership of hosts and users by configuring inclusive\n"
"or exclusive regex patterns, you can automatically assign a new entries "
"into\n"
"a group or hostgroup based upon attribute information.\n"
msgstr ""

#: ipalib/plugins/automember.py:36
msgid ""
"\n"
"A rule is directly associated with a group by name, so you cannot create\n"
"a rule without an accompanying group or hostgroup.\n"
msgstr ""

#: ipalib/plugins/automember.py:39
msgid ""
"\n"
"A condition is a regular expression used by 389-ds to match a new incoming\n"
"entry with an automember rule. If it matches an inclusive rule then the\n"
"entry is added to the appropriate group or hostgroup.\n"
msgstr ""

#: ipalib/plugins/automember.py:43
msgid ""
"\n"
"A default group or hostgroup could be specified for entries that do not\n"
"match any rule. In case of user entries this group will be a fallback group\n"
"because all users are by default members of group specified in IPA config.\n"
msgstr ""

#: ipalib/plugins/automember.py:47
msgid ""
"\n"
"The automember-rebuild command can be used to retroactively run automember "
"rules\n"
"against existing entries, thus rebuilding their membership.\n"
msgstr ""

#: ipalib/plugins/automember.py:50 ipalib/plugins/host.py:79
#: ipalib/plugins/otptoken.py:46 ipalib/plugins/otptoken_yubikey.py:37
#: ipalib/plugins/permission.py:90 ipalib/plugins/radiusproxy.py:35
#: ipalib/plugins/sudorule.py:66
msgid ""
"\n"
"EXAMPLES:\n"
msgstr ""

#: ipalib/plugins/automember.py:52
msgid ""
"\n"
" Add the initial group or hostgroup:\n"
"   ipa hostgroup-add --desc=\"Web Servers\" webservers\n"
"   ipa group-add --desc=\"Developers\" devel\n"
msgstr ""

#: ipalib/plugins/automember.py:56
msgid ""
"\n"
" Add the initial rule:\n"
"   ipa automember-add --type=hostgroup webservers\n"
"   ipa automember-add --type=group devel\n"
msgstr ""

#: ipalib/plugins/automember.py:60
msgid ""
"\n"
" Add a condition to the rule:\n"
"   ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-"
"regex=^web[1-9]+\\.example\\.com webservers\n"
"   ipa automember-add-condition --key=manager --type=group --inclusive-"
"regex=^uid=mscott devel\n"
msgstr ""

#: ipalib/plugins/automember.py:64
msgid ""
"\n"
" Add an exclusive condition to the rule to prevent auto assignment:\n"
"   ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-"
"regex=^web5\\.example\\.com webservers\n"
msgstr ""

#: ipalib/plugins/automember.py:67
msgid ""
"\n"
" Add a host:\n"
"    ipa host-add web1.example.com\n"
msgstr ""

#: ipalib/plugins/automember.py:70
msgid ""
"\n"
" Add a user:\n"
"    ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n"
msgstr ""

#: ipalib/plugins/automember.py:73
msgid ""
"\n"
" Verify automembership:\n"
"    ipa hostgroup-show webservers\n"
"      Host-group: webservers\n"
"      Description: Web Servers\n"
"      Member hosts: web1.example.com\n"
"\n"
"    ipa group-show devel\n"
"      Group name: devel\n"
"      Description: Developers\n"
"      GID: 1004200000\n"
"      Member users: tuser\n"
msgstr ""

#: ipalib/plugins/automember.py:85
msgid ""
"\n"
" Remove a condition from the rule:\n"
"   ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-"
"regex=^web[1-9]+\\.example\\.com webservers\n"
msgstr ""

#: ipalib/plugins/automember.py:88
msgid ""
"\n"
" Modify the automember rule:\n"
"    ipa automember-mod\n"
msgstr ""

#: ipalib/plugins/automember.py:91
msgid ""
"\n"
" Set the default (fallback) target group:\n"
"    ipa automember-default-group-set --default-group=webservers --"
"type=hostgroup\n"
"    ipa automember-default-group-set --default-group=ipausers --type=group\n"
msgstr ""

#: ipalib/plugins/automember.py:95
msgid ""
"\n"
" Remove the default (fallback) target group:\n"
"    ipa automember-default-group-remove --type=hostgroup\n"
"    ipa automember-default-group-remove --type=group\n"
msgstr ""

#: ipalib/plugins/automember.py:99
msgid ""
"\n"
" Show the default (fallback) target group:\n"
"    ipa automember-default-group-show --type=hostgroup\n"
"    ipa automember-default-group-show --type=group\n"
msgstr ""

#: ipalib/plugins/automember.py:103
msgid ""
"\n"
" Find all of the automember rules:\n"
"    ipa automember-find\n"
msgstr ""

#: ipalib/plugins/automember.py:106
msgid ""
"\n"
" Display a automember rule:\n"
"    ipa automember-show --type=hostgroup webservers\n"
"    ipa automember-show --type=group devel\n"
msgstr ""

#: ipalib/plugins/automember.py:110
msgid ""
"\n"
" Delete an automember rule:\n"
"    ipa automember-del --type=hostgroup webservers\n"
"    ipa automember-del --type=group devel\n"
msgstr ""

#: ipalib/plugins/automember.py:114
msgid ""
"\n"
" Rebuild membership for all users:\n"
"    ipa automember-rebuild --type=group\n"
msgstr ""

#: ipalib/plugins/automember.py:117
msgid ""
"\n"
" Rebuild membership for all hosts:\n"
"    ipa automember-rebuild --type=hostgroup\n"
msgstr ""

#: ipalib/plugins/automember.py:120
msgid ""
"\n"
" Rebuild membership for specified users:\n"
"    ipa automember-rebuild --users=tuser1 --users=tuser2\n"
msgstr ""

#: ipalib/plugins/automember.py:123
msgid ""
"\n"
" Rebuild membership for specified hosts:\n"
"    ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example."
"com\n"
msgstr ""

#: ipalib/plugins/automember.py:142 ipalib/plugins/automember.py:143
msgid "Inclusive Regex"
msgstr ""

#: ipalib/plugins/automember.py:149 ipalib/plugins/automember.py:150
msgid "Exclusive Regex"
msgstr ""

#: ipalib/plugins/automember.py:155
msgid "Attribute Key"
msgstr ""

#: ipalib/plugins/automember.py:156
msgid ""
"Attribute to filter via regex. For example fqdn for a host, or manager for a "
"user"
msgstr ""

#: ipalib/plugins/automember.py:163
msgid "Grouping Type"
msgstr ""

#: ipalib/plugins/automember.py:164
msgid "Grouping to which the rule applies"
msgstr ""

#: ipalib/plugins/automember.py:172 ipalib/plugins/automember.py:173
msgid "Automember Rule"
msgstr ""

#: ipalib/plugins/automember.py:232
msgid "Auto Membership Rule"
msgstr ""

#: ipalib/plugins/automember.py:237 ipalib/plugins/automount.py:600
#: ipalib/plugins/group.py:222 ipalib/plugins/hbacrule.py:233
#: ipalib/plugins/hbacsvc.py:108 ipalib/plugins/hbacsvcgroup.py:112
#: ipalib/plugins/host.py:385 ipalib/plugins/hostgroup.py:144
#: ipalib/plugins/netgroup.py:179 ipalib/plugins/otptoken.py:149
#: ipalib/plugins/privilege.py:107 ipalib/plugins/radiusproxy.py:109
#: ipalib/plugins/role.py:139 ipalib/plugins/selinuxusermap.py:227
#: ipalib/plugins/sudocmd.py:119 ipalib/plugins/sudocmdgroup.py:122
#: ipalib/plugins/sudorule.py:223
msgid "Description"
msgstr ""

#: ipalib/plugins/automember.py:238
msgid "A description of this auto member rule"
msgstr ""

#: ipalib/plugins/automember.py:242 ipalib/plugins/automember.py:568
msgid "Default (fallback) Group"
msgstr ""

#: ipalib/plugins/automember.py:243
msgid "Default group for entries to land"
msgstr ""

#: ipalib/plugins/automember.py:255
#, python-format
msgid "%(otype)s \"%(oname)s\" not found"
msgstr ""

#: ipalib/plugins/automember.py:281
#, python-format
msgid "%s is not a valid attribute."
msgstr ""

#: ipalib/plugins/automember.py:294
msgid ""
"\n"
"    Add an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:299
#, python-format
msgid "Added automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:306
msgid "Auto Membership is not configured"
msgstr ""

#: ipalib/plugins/automember.py:318
msgid ""
"\n"
"    Add conditions to an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:323
msgid "Failed to add"
msgstr ""

#: ipalib/plugins/automember.py:330
#, python-format
msgid "Added condition(s) to \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:339
msgid "Conditions that could not be added"
msgstr ""

#: ipalib/plugins/automember.py:343
msgid "Number of conditions added"
msgstr ""

#: ipalib/plugins/automember.py:353 ipalib/plugins/automember.py:438
#, python-format
msgid "Auto member rule: %s not found!"
msgstr ""

#: ipalib/plugins/automember.py:395
msgid ""
"\n"
"        Override this so we can add completed and failed to the return "
"result.\n"
"        "
msgstr ""

#: ipalib/plugins/automember.py:410
msgid ""
"\n"
"    Remove conditions from an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:415
#, python-format
msgid "Removed condition(s) from \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:424
msgid "Conditions that could not be removed"
msgstr ""

#: ipalib/plugins/automember.py:428
msgid "Number of conditions removed"
msgstr ""

#: ipalib/plugins/automember.py:482
msgid ""
"\n"
"        Override this so we can set completed and failed.\n"
"        "
msgstr ""

#: ipalib/plugins/automember.py:497
msgid ""
"\n"
"    Modify an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:502
#, python-format
msgid "Modified automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:512
msgid ""
"\n"
"    Delete an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:517
#, python-format
msgid "Deleted automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:527
msgid ""
"\n"
"    Search for automember rules.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:534
#, python-format
msgid "%(count)d rules matched"
msgid_plural "%(count)d rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automember.py:546
msgid ""
"\n"
"    Display information about an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:561
msgid ""
"\n"
"    Set default (fallback) group for all unmatched entries.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:569
msgid "Default (fallback) group for entries to land"
msgstr ""

#: ipalib/plugins/automember.py:573
#, python-format
msgid "Set default (fallback) group for automember \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:589
msgid ""
"\n"
"    Remove default (fallback) group for all unmatched entries.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:594
#, python-format
msgid "Removed default (fallback) group for automember \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:604 ipalib/plugins/automember.py:612
#: ipalib/plugins/automember.py:636
msgid "No default (fallback) group set"
msgstr ""

#: ipalib/plugins/automember.py:623
msgid ""
"\n"
"    Display information about the default (fallback) automember groups.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:647
msgid "Rebuild auto membership."
msgstr ""

#: ipalib/plugins/automember.py:653
msgid "Rebuild membership for all members of a grouping"
msgstr ""

#: ipalib/plugins/automember.py:657 ipalib/plugins/hbacrule.py:240
#: ipalib/plugins/internal.py:513 ipalib/plugins/selinuxusermap.py:234
#: ipalib/plugins/sudorule.py:267 ipalib/plugins/user.py:429
msgid "Users"
msgstr ""

#: ipalib/plugins/automember.py:658
msgid "Rebuild membership for specified users"
msgstr ""

#: ipalib/plugins/automember.py:662 ipalib/plugins/hbacrule.py:248
#: ipalib/plugins/host.py:373 ipalib/plugins/internal.py:507
#: ipalib/plugins/selinuxusermap.py:242 ipalib/plugins/sudorule.py:280
msgid "Hosts"
msgstr ""

#: ipalib/plugins/automember.py:663
msgid "Rebuild membership for specified hosts"
msgstr ""

#: ipalib/plugins/automember.py:668
msgid "No wait"
msgstr ""

#: ipalib/plugins/automember.py:669
msgid "Don't wait for rebuilding membership"
msgstr ""

#: ipalib/plugins/automember.py:676
msgid "Task DN"
msgstr ""

#: ipalib/plugins/automember.py:677
msgid "DN of the started task"
msgstr ""

#: ipalib/plugins/automember.py:694
msgid "at least one of options: type, users, hosts must be specified"
msgstr ""

#: ipalib/plugins/automember.py:700
msgid "users and hosts cannot both be set"
msgstr ""

#: ipalib/plugins/automember.py:704
msgid "hosts cannot be set when type is 'group'"
msgstr ""

#: ipalib/plugins/automember.py:708
msgid "users cannot be set when type is 'hostgroup'"
msgstr ""

#: ipalib/plugins/automember.py:759
msgid "Automember rebuild membership task started"
msgstr ""

#: ipalib/plugins/automember.py:763 ipalib/plugins/internal.py:158
msgid "Automember rebuild membership task completed"
msgstr ""

#: ipalib/plugins/automember.py:780
#, python-format
msgid "Task DN = '%s'"
msgstr ""

#: ipalib/plugins/automember.py:783 ipalib/plugins/internal.py:702
msgid "Automember"
msgstr ""

#: ipalib/plugins/automount.py:30
msgid ""
"\n"
"Automount\n"
"\n"
"Stores automount(8) configuration for autofs(8) in IPA.\n"
"\n"
"The base of an automount configuration is the configuration file auto."
"master.\n"
"This is also the base location in IPA. Multiple auto.master configurations\n"
"can be stored in separate locations. A location is implementation-specific\n"
"with the default being a location named 'default'. For example, you can "
"have\n"
"locations by geographic region, by floor, by type, etc.\n"
"\n"
"Automount has three basic object types: locations, maps and keys.\n"
"\n"
"A location defines a set of maps anchored in auto.master. This allows you\n"
"to store multiple automount configurations. A location in itself isn't\n"
"very interesting, it is just a point to start a new automount map.\n"
"\n"
"A map is roughly equivalent to a discrete automount file and provides\n"
"storage for keys.\n"
"\n"
"A key is a mount point associated with a map.\n"
"\n"
"When a new location is created, two maps are automatically created for\n"
"it: auto.master and auto.direct. auto.master is the root map for all\n"
"automount maps for the location. auto.direct is the default map for\n"
"direct mounts and is mounted on /-.\n"
"\n"
"An automount map may contain a submount key. This key defines a mount\n"
"location within the map that references another map. This can be done\n"
"either using automountmap-add-indirect --parentmap or manually\n"
"with automountkey-add and setting info to \"-type=autofs :<mapname>\".\n"
"\n"
"EXAMPLES:\n"
"\n"
"Locations:\n"
"\n"
"  Create a named location, \"Baltimore\":\n"
"    ipa automountlocation-add baltimore\n"
"\n"
"  Display the new location:\n"
"    ipa automountlocation-show baltimore\n"
"\n"
"  Find available locations:\n"
"    ipa automountlocation-find\n"
"\n"
"  Remove a named automount location:\n"
"    ipa automountlocation-del baltimore\n"
"\n"
"  Show what the automount maps would look like if they were in the "
"filesystem:\n"
"    ipa automountlocation-tofiles baltimore\n"
"\n"
"  Import an existing configuration into a location:\n"
"    ipa automountlocation-import baltimore /etc/auto.master\n"
"\n"
"    The import will fail if any duplicate entries are found. For\n"
"    continuous operation where errors are ignored, use the --continue\n"
"    option.\n"
"\n"
"Maps:\n"
"\n"
"  Create a new map, \"auto.share\":\n"
"    ipa automountmap-add baltimore auto.share\n"
"\n"
"  Display the new map:\n"
"    ipa automountmap-show baltimore auto.share\n"
"\n"
"  Find maps in the location baltimore:\n"
"    ipa automountmap-find baltimore\n"
"\n"
"  Create an indirect map with auto.share as a submount:\n"
"    ipa automountmap-add-indirect baltimore --parentmap=auto.share --"
"mount=sub auto.man\n"
"\n"
"    This is equivalent to:\n"
"\n"
"    ipa automountmap-add-indirect baltimore --mount=/man auto.man\n"
"    ipa automountkey-add baltimore auto.man --key=sub --info=\"-"
"fstype=autofs ldap:auto.share\"\n"
"\n"
"  Remove the auto.share map:\n"
"    ipa automountmap-del baltimore auto.share\n"
"\n"
"Keys:\n"
"\n"
"  Create a new key for the auto.share map in location baltimore. This ties\n"
"  the map we previously created to auto.master:\n"
"    ipa automountkey-add baltimore auto.master --key=/share --info=auto."
"share\n"
"\n"
"  Create a new key for our auto.share map, an NFS mount for man pages:\n"
"    ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft,"
"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n"
"\n"
"  Find all keys for the auto.share map:\n"
"    ipa automountkey-find baltimore auto.share\n"
"\n"
"  Find all direct automount keys:\n"
"    ipa automountkey-find baltimore --key=/-\n"
"\n"
"  Remove the man key from the auto.share map:\n"
"    ipa automountkey-del baltimore auto.share --key=man\n"
msgstr ""

#: ipalib/plugins/automount.py:209
msgid "automount location"
msgstr ""

#: ipalib/plugins/automount.py:210
msgid "automount locations"
msgstr ""

#: ipalib/plugins/automount.py:213
msgid "Automount Locations"
msgstr ""

#: ipalib/plugins/automount.py:214
msgid "Automount Location"
msgstr ""

#: ipalib/plugins/automount.py:243 ipalib/plugins/host.py:395
msgid "Location"
msgstr ""

#: ipalib/plugins/automount.py:244
msgid "Automount location name."
msgstr ""

#: ipalib/plugins/automount.py:252
msgid "Create a new automount location."
msgstr ""

#: ipalib/plugins/automount.py:254
#, python-format
msgid "Added automount location \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:272
msgid "Delete an automount location."
msgstr ""

#: ipalib/plugins/automount.py:274
#, python-format
msgid "Deleted automount location \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:279
msgid "Display an automount location."
msgstr ""

#: ipalib/plugins/automount.py:284
msgid "Search for an automount location."
msgstr ""

#: ipalib/plugins/automount.py:287
#, python-format
msgid "%(count)d automount location matched"
msgid_plural "%(count)d automount locations matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:294
msgid "Generate automount files for a specific location."
msgstr ""

#: ipalib/plugins/automount.py:372
msgid "maps not connected to /etc/auto.master:"
msgstr ""

#: ipalib/plugins/automount.py:389
msgid "Import automount files for a specific location."
msgstr ""

#: ipalib/plugins/automount.py:393
msgid "Master file"
msgstr ""

#: ipalib/plugins/automount.py:394
msgid "Automount master file."
msgstr ""

#: ipalib/plugins/automount.py:401
msgid ""
"Continuous operation mode. Errors are reported but the process continues."
msgstr ""

#: ipalib/plugins/automount.py:413
#, python-format
msgid "File %(file)s not found"
msgstr ""

#: ipalib/plugins/automount.py:465
#, python-format
msgid "key %(key)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:481
#, python-format
msgid "map %(map)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:585
msgid "automount map"
msgstr ""

#: ipalib/plugins/automount.py:586
msgid "automount maps"
msgstr ""

#: ipalib/plugins/automount.py:594
msgid "Map"
msgstr ""

#: ipalib/plugins/automount.py:595
msgid "Automount map name."
msgstr ""

#: ipalib/plugins/automount.py:629
msgid "Automount Maps"
msgstr ""

#: ipalib/plugins/automount.py:630
msgid "Automount Map"
msgstr ""

#: ipalib/plugins/automount.py:635
msgid "Create a new automount map."
msgstr ""

#: ipalib/plugins/automount.py:637
#, python-format
msgid "Added automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:642
msgid "Delete an automount map."
msgstr ""

#: ipalib/plugins/automount.py:644
#, python-format
msgid "Deleted automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:662
msgid "Modify an automount map."
msgstr ""

#: ipalib/plugins/automount.py:664
#, python-format
msgid "Modified automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:669
msgid "Search for an automount map."
msgstr ""

#: ipalib/plugins/automount.py:672
#, python-format
msgid "%(count)d automount map matched"
msgid_plural "%(count)d automount maps matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:679
msgid "Display an automount map."
msgstr ""

#: ipalib/plugins/automount.py:684
msgid "Automount key object."
msgstr ""

#: ipalib/plugins/automount.py:688
msgid "automount key"
msgstr ""

#: ipalib/plugins/automount.py:689
msgid "automount keys"
msgstr ""

#: ipalib/plugins/automount.py:701 ipalib/plugins/automount.py:950
#: ipalib/plugins/automount.py:1057 ipalib/plugins/otptoken.py:191
msgid "Key"
msgstr ""

#: ipalib/plugins/automount.py:702 ipalib/plugins/automount.py:951
#: ipalib/plugins/automount.py:1058
msgid "Automount key name."
msgstr ""

#: ipalib/plugins/automount.py:707 ipalib/plugins/automount.py:955
#: ipalib/plugins/automount.py:1062
msgid "Mount information"
msgstr ""

#: ipalib/plugins/automount.py:710
msgid "description"
msgstr ""

#: ipalib/plugins/automount.py:748
msgid "Automount Keys"
msgstr ""

#: ipalib/plugins/automount.py:749
msgid "Automount Key"
msgstr ""

#: ipalib/plugins/automount.py:750
#, python-format
msgid ""
"The key,info pair must be unique. A key named %(key)s with info %(info)s "
"already exists"
msgstr ""

#: ipalib/plugins/automount.py:751
#, python-format
msgid "key named %(key)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:752
#, python-format
msgid "The automount key %(key)s with info %(info)s does not exist"
msgstr ""

#: ipalib/plugins/automount.py:802
#, python-format
msgid ""
"More than one entry with key %(key)s found, use --info to select specific "
"entry."
msgstr ""

#: ipalib/plugins/automount.py:861
msgid "Create a new automount key."
msgstr ""

#: ipalib/plugins/automount.py:863
#, python-format
msgid "Added automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:890
msgid "Create a new indirect mount point."
msgstr ""

#: ipalib/plugins/automount.py:892
#, python-format
msgid "Added automount indirect map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:897
msgid "Mount point"
msgstr ""

#: ipalib/plugins/automount.py:901
msgid "Parent map"
msgstr ""

#: ipalib/plugins/automount.py:902
msgid "Name of parent automount map (default: auto.master)."
msgstr ""

#: ipalib/plugins/automount.py:916
msgid "mount point is relative to parent map, cannot begin with /"
msgstr ""

#: ipalib/plugins/automount.py:943
msgid "Delete an automount key."
msgstr ""

#: ipalib/plugins/automount.py:945
#, python-format
msgid "Deleted automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:984
msgid "Modify an automount key."
msgstr ""

#: ipalib/plugins/automount.py:986
#, python-format
msgid "Modified automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:993
msgid "New mount information"
msgstr ""

#: ipalib/plugins/automount.py:1042
msgid "Search for an automount key."
msgstr ""

#: ipalib/plugins/automount.py:1045
#, python-format
msgid "%(count)d automount key matched"
msgid_plural "%(count)d automount keys matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:1052
msgid "Display an automount key."
msgstr ""

#: ipalib/plugins/baseldap.py:43 ipalib/plugins/internal.py:292
#: ipalib/plugins/internal.py:666 ipalib/plugins/migration.py:502
#: ipalib/plugins/otptoken.py:442 ipalib/plugins/user.py:497
msgid "Password"
msgstr ""

#: ipalib/plugins/baseldap.py:46
msgid "Failed members"
msgstr ""

#: ipalib/plugins/baseldap.py:49
msgid "Member users"
msgstr ""

#: ipalib/plugins/baseldap.py:52
msgid "Member groups"
msgstr ""

#: ipalib/plugins/baseldap.py:55
msgid "Member of groups"
msgstr ""

#: ipalib/plugins/baseldap.py:58
msgid "Member hosts"
msgstr ""

#: ipalib/plugins/baseldap.py:61
msgid "Member host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:64
msgid "Member of host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:73 ipalib/plugins/role.py:128
msgid "Roles"
msgstr ""

#: ipalib/plugins/baseldap.py:76 ipalib/plugins/sudocmdgroup.py:110
#: ipalib/plugins/sudocmdgroup.py:130
msgid "Sudo Command Groups"
msgstr ""

#: ipalib/plugins/baseldap.py:82
msgid "Granting privilege to roles"
msgstr ""

#: ipalib/plugins/baseldap.py:85
msgid "Member netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:88
msgid "Member of netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:91
msgid "Member services"
msgstr ""

#: ipalib/plugins/baseldap.py:94
msgid "Member service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:100
msgid "Member HBAC service"
msgstr ""

#: ipalib/plugins/baseldap.py:103
msgid "Member HBAC service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:118
msgid "Indirect Member users"
msgstr ""

#: ipalib/plugins/baseldap.py:121
msgid "Indirect Member groups"
msgstr ""

#: ipalib/plugins/baseldap.py:124
msgid "Indirect Member hosts"
msgstr ""

#: ipalib/plugins/baseldap.py:127
msgid "Indirect Member host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:130
msgid "Indirect Member of roles"
msgstr ""

#: ipalib/plugins/baseldap.py:133
msgid "Indirect Member permissions"
msgstr ""

#: ipalib/plugins/baseldap.py:136
msgid "Indirect Member HBAC service"
msgstr ""

#: ipalib/plugins/baseldap.py:139
msgid "Indirect Member HBAC service group"
msgstr ""

#: ipalib/plugins/baseldap.py:142
msgid "Indirect Member netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:163
msgid "Failed source hosts/hostgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:166
msgid "Failed hosts/hostgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:169
msgid "Failed users/groups"
msgstr ""

#: ipalib/plugins/baseldap.py:172
msgid "Failed service/service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:175
msgid "Failed to remove"
msgstr ""

#: ipalib/plugins/baseldap.py:179
msgid "Failed RunAs"
msgstr ""

#: ipalib/plugins/baseldap.py:182
msgid "Failed RunAsGroup"
msgstr ""

#: ipalib/plugins/baseldap.py:200
msgid "Invalid format. Should be name=value"
msgstr ""

#: ipalib/plugins/baseldap.py:311
msgid "External host"
msgstr ""

#: ipalib/plugins/baseldap.py:483
msgid "An IPA master host cannot be deleted or disabled"
msgstr ""

#: ipalib/plugins/baseldap.py:497
msgid "entry"
msgstr ""

#: ipalib/plugins/baseldap.py:498
msgid "entries"
msgstr ""

#: ipalib/plugins/baseldap.py:531 ipalib/plugins/baseldap.py:532
msgid "Entry"
msgstr ""

#: ipalib/plugins/baseldap.py:535
#, python-format
msgid "container entry (%(container)s) not found"
msgstr ""

#: ipalib/plugins/baseldap.py:536
#, python-format
msgid "%(parent)s: %(oname)s not found"
msgstr ""

#: ipalib/plugins/baseldap.py:537
#, python-format
msgid "%(pkey)s: %(oname)s not found"
msgstr ""

#: ipalib/plugins/baseldap.py:538
#, python-format
msgid "%(oname)s with name \"%(pkey)s\" already exists"
msgstr ""

#: ipalib/plugins/baseldap.py:738 ipalib/plugins/baseldap.py:746
#: ipalib/plugins/baseldap.py:751
#, python-format
msgid "attribute \"%(attribute)s\" not allowed"
msgstr ""

#: ipalib/plugins/baseldap.py:813
msgid ""
"Set an attribute to a name/value pair. Format is attr=value.\n"
"For multi-valued attributes, the command replaces the values already present."
msgstr ""

#: ipalib/plugins/baseldap.py:819
msgid ""
"Add an attribute/value pair. Format is attr=value. The attribute\n"
"must be part of the schema."
msgstr ""

#: ipalib/plugins/baseldap.py:825
msgid ""
"Delete an attribute/value pair. The option will be evaluated\n"
"last, after all sets and adds."
msgstr ""

#: ipalib/plugins/baseldap.py:859
msgid "attribute is not configurable"
msgstr ""

#: ipalib/plugins/baseldap.py:962
msgid "No such attribute on this entry"
msgstr ""

#: ipalib/plugins/baseldap.py:1058
msgid "Suppress processing of membership attributes."
msgstr ""

#: ipalib/plugins/baseldap.py:1235
msgid "Continuous mode: Don't stop on errors."
msgstr ""

#: ipalib/plugins/baseldap.py:1256 ipalib/plugins/baseldap.py:1332
msgid "Rights"
msgstr ""

#: ipalib/plugins/baseldap.py:1257 ipalib/plugins/baseldap.py:1333
msgid ""
"Display the access rights of this entry (requires --all). See ipa man page "
"for details."
msgstr ""

#: ipalib/plugins/baseldap.py:1342
msgid "Rename"
msgstr ""

#: ipalib/plugins/baseldap.py:1343
#, python-format
msgid "Rename the %(ldap_obj_name)s object"
msgstr ""

#: ipalib/plugins/baseldap.py:1424
msgid "the entry was deleted while being modified"
msgstr ""

#: ipalib/plugins/baseldap.py:1555 ipalib/plugins/baseldap.py:2023
#, python-format
msgid "%s"
msgstr ""

#: ipalib/plugins/baseldap.py:1567
#, python-format
msgid "member %s"
msgstr ""

#: ipalib/plugins/baseldap.py:1597 ipalib/plugins/baseldap.py:2048
#, python-format
msgid "%s to add"
msgstr ""

#: ipalib/plugins/baseldap.py:1605 ipalib/plugins/baseldap.py:2060
#: ipalib/plugins/privilege.py:176 ipalib/plugins/privilege.py:231
#: ipalib/plugins/role.py:211 ipalib/plugins/role.py:234
msgid "Members that could not be added"
msgstr ""

#: ipalib/plugins/baseldap.py:1609 ipalib/plugins/baseldap.py:2064
msgid "Number of members added"
msgstr ""

#: ipalib/plugins/baseldap.py:1697 ipalib/plugins/baseldap.py:2152
#, python-format
msgid "%s to remove"
msgstr ""

#: ipalib/plugins/baseldap.py:1704 ipalib/plugins/baseldap.py:2164
msgid "Members that could not be removed"
msgstr ""

#: ipalib/plugins/baseldap.py:1708 ipalib/plugins/baseldap.py:2168
msgid "Number of members removed"
msgstr ""

#: ipalib/plugins/baseldap.py:1797
msgid "Primary key only"
msgstr ""

#: ipalib/plugins/baseldap.py:1798
#, python-format
msgid "Results should contain primary key attribute only (\"%s\")"
msgstr ""

#: ipalib/plugins/baseldap.py:1806
#, python-format
msgid ""
"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s."
msgstr ""

#: ipalib/plugins/baseldap.py:1807
#, python-format
msgid ""
"Search for %(searched_object)s without these %(relationship)s "
"%(ldap_object)s."
msgstr ""

#: ipalib/plugins/baseldap.py:1816
msgid "Time Limit"
msgstr ""

#: ipalib/plugins/baseldap.py:1817
msgid "Time limit of search in seconds"
msgstr ""

#: ipalib/plugins/baseldap.py:1823 ipalib/plugins/cert.py:721
#: ipalib/plugins/hbactest.py:289
msgid "Size Limit"
msgstr ""

#: ipalib/plugins/baseldap.py:1824
msgid "Maximum number of entries returned"
msgstr ""

#: ipalib/plugins/batch.py:66
msgid "Nested Methods to execute"
msgstr ""

#: ipalib/plugins/cert.py:47
msgid ""
"\n"
"IPA certificate operations\n"
"\n"
"Implements a set of commands for managing server SSL certificates.\n"
"\n"
"Certificate requests exist in the form of a Certificate Signing Request "
"(CSR)\n"
"in PEM format.\n"
"\n"
"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n"
"subject to values configured in the server.\n"
"\n"
"A certificate is stored with a service principal and a service principal\n"
"needs a host.\n"
"\n"
"In order to request a certificate:\n"
"\n"
"* The host must exist\n"
"* The service must exist (or you use the --add option to automatically add "
"it)\n"
"\n"
"SEARCHING:\n"
"\n"
"Certificates may be searched on by certificate subject, serial number,\n"
"revocation reason, validity dates and the issued date.\n"
"\n"
"When searching on dates the _from date does a >= search and the _to date\n"
"does a <= search. When combined these are done as an AND.\n"
"\n"
"Dates are treated as GMT to match the dates in the certificates.\n"
"\n"
"The date format is YYYY-mm-dd.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Request a new certificate and add the principal:\n"
"   ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n"
"\n"
" Retrieve an existing certificate:\n"
"   ipa cert-show 1032\n"
"\n"
" Revoke a certificate (see RFC 5280 for reason details):\n"
"   ipa cert-revoke --revocation-reason=6 1032\n"
"\n"
" Remove a certificate from revocation hold status:\n"
"   ipa cert-remove-hold 1032\n"
"\n"
" Check the status of a signing request:\n"
"   ipa cert-status 10\n"
"\n"
" Search for certificates by hostname:\n"
"   ipa cert-find --subject=ipaserver.example.com\n"
"\n"
" Search for revoked certificates by reason:\n"
"   ipa cert-find --revocation-reason=5\n"
"\n"
" Search for certificates based on issuance date\n"
"   ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n"
"\n"
"IPA currently immediately issues (or declines) all certificate requests so\n"
"the status of a request is not normally useful. This is for future use\n"
"or the case where a CA does not immediately issue a certificate.\n"
"\n"
"The following revocation reasons are supported:\n"
"\n"
"    * 0 - unspecified\n"
"    * 1 - keyCompromise\n"
"    * 2 - cACompromise\n"
"    * 3 - affiliationChanged\n"
"    * 4 - superseded\n"
"    * 5 - cessationOfOperation\n"
"    * 6 - certificateHold\n"
"    * 8 - removeFromCRL\n"
"    * 9 - privilegeWithdrawn\n"
"    * 10 - aACompromise\n"
"\n"
"Note that reason code 7 is not used.  See RFC 5280 for more details:\n"
"\n"
"http://www.ietf.org/rfc/rfc5280.txt\n"
"\n"
msgstr ""

#: ipalib/plugins/cert.py:155 ipalib/plugins/cert.py:320
#, python-format
msgid "Failure decoding Certificate Signing Request: %s"
msgstr ""

#: ipalib/plugins/cert.py:219
msgid "Submit a certificate signing request."
msgstr ""

#: ipalib/plugins/cert.py:223
msgid "CSR"
msgstr ""

#: ipalib/plugins/cert.py:232 ipalib/plugins/service.py:371
msgid "Principal"
msgstr ""

#: ipalib/plugins/cert.py:233
msgid "Service principal for this certificate (e.g. HTTP/test.example.com)"
msgstr ""

#: ipalib/plugins/cert.py:240
msgid "automatically add the principal if it doesn't exist"
msgstr ""

#: ipalib/plugins/cert.py:248 ipalib/plugins/cert.py:504
#: ipalib/plugins/host.py:424 ipalib/plugins/internal.py:332
#: ipalib/plugins/service.py:378
msgid "Certificate"
msgstr ""

#: ipalib/plugins/cert.py:251 ipalib/plugins/cert.py:507
#: ipalib/plugins/cert.py:661 ipalib/plugins/cert.py:662
#: ipalib/plugins/host.py:169 ipalib/plugins/internal.py:345
#: ipalib/plugins/service.py:105
msgid "Subject"
msgstr ""

#: ipalib/plugins/cert.py:254 ipalib/plugins/cert.py:510
#: ipalib/plugins/host.py:178 ipalib/plugins/service.py:114
msgid "Issuer"
msgstr ""

#: ipalib/plugins/cert.py:257 ipalib/plugins/cert.py:513
#: ipalib/plugins/host.py:181 ipalib/plugins/service.py:117
msgid "Not Before"
msgstr ""

#: ipalib/plugins/cert.py:260 ipalib/plugins/cert.py:516
#: ipalib/plugins/host.py:184 ipalib/plugins/service.py:120
msgid "Not After"
msgstr ""

#: ipalib/plugins/cert.py:263 ipalib/plugins/cert.py:519
#: ipalib/plugins/host.py:187 ipalib/plugins/service.py:123
msgid "Fingerprint (MD5)"
msgstr ""

#: ipalib/plugins/cert.py:266 ipalib/plugins/cert.py:522
#: ipalib/plugins/host.py:190 ipalib/plugins/service.py:126
msgid "Fingerprint (SHA1)"
msgstr ""

#: ipalib/plugins/cert.py:269 ipalib/plugins/cert.py:491
#: ipalib/plugins/cert.py:735
msgid "Serial number"
msgstr ""

#: ipalib/plugins/cert.py:272 ipalib/plugins/cert.py:528
#: ipalib/plugins/cert.py:732
msgid "Serial number (hex)"
msgstr ""

#: ipalib/plugins/cert.py:279 ipalib/plugins/misc.py:61
msgid "Dictionary mapping variable name to value"
msgstr ""

#: ipalib/plugins/cert.py:332
msgid "No hostname was found in subject of request."
msgstr ""

#: ipalib/plugins/cert.py:337
#, python-format
msgid ""
"hostname in subject of request '%(subject_host)s' does not match principal "
"hostname '%(hostname)s'"
msgstr ""

#: ipalib/plugins/cert.py:344
#, python-format
msgid "extension %s is forbidden"
msgstr ""

#: ipalib/plugins/cert.py:352
#, python-format
msgid "subject alt name type %s is forbidden"
msgstr ""

#: ipalib/plugins/cert.py:366
msgid "The service principal for this request doesn't exist."
msgstr ""

#: ipalib/plugins/cert.py:371
msgid "You need to be a member of the serviceadmin role to add services"
msgstr ""

#: ipalib/plugins/cert.py:378
#, python-format
msgid ""
"Insufficient 'write' privilege to the 'userCertificate' attribute of entry "
"'%s'."
msgstr ""

#: ipalib/plugins/cert.py:396
#, python-format
msgid ""
"The service principal for subject alt name %s in certificate request does "
"not exist"
msgstr ""

#: ipalib/plugins/cert.py:402
#, python-format
msgid ""
"Insufficient privilege to create a certificate with subject alt name '%s'."
msgstr ""

#: ipalib/plugins/cert.py:408
#, python-format
msgid ""
"Principal '%s' in subject alt name does not match requested service principal"
msgstr ""

#: ipalib/plugins/cert.py:412
#, python-format
msgid "Subject alt name type %s is forbidden"
msgstr ""

#: ipalib/plugins/cert.py:465
msgid "Check the status of a certificate signing request."
msgstr ""

#: ipalib/plugins/cert.py:469
msgid "Request id"
msgstr ""

#: ipalib/plugins/cert.py:475
msgid "Request status"
msgstr ""

#: ipalib/plugins/cert.py:492
msgid "Serial number in decimal or if prefixed with 0x in hexadecimal"
msgstr ""

#: ipalib/plugins/cert.py:498
msgid "Retrieve an existing certificate."
msgstr ""

#: ipalib/plugins/cert.py:525 ipalib/plugins/host.py:193
#: ipalib/plugins/internal.py:342 ipalib/plugins/internal.py:372
#: ipalib/plugins/service.py:129
msgid "Revocation reason"
msgstr ""

#: ipalib/plugins/cert.py:534
msgid "Output filename"
msgstr ""

#: ipalib/plugins/cert.py:535
msgid "File to store the certificate in."
msgstr ""

#: ipalib/plugins/cert.py:586
msgid "Revoke a certificate."
msgstr ""

#: ipalib/plugins/cert.py:592
msgid "Revoked"
msgstr ""

#: ipalib/plugins/cert.py:600 ipalib/plugins/cert.py:666
msgid "Reason"
msgstr ""

#: ipalib/plugins/cert.py:601 ipalib/plugins/cert.py:667
msgid "Reason for revoking the certificate (0-10)"
msgstr ""

#: ipalib/plugins/cert.py:623
msgid "7 is not a valid revocation reason"
msgstr ""

#: ipalib/plugins/cert.py:633
msgid "Take a revoked certificate off hold."
msgstr ""

#: ipalib/plugins/cert.py:639
msgid "Unrevoked"
msgstr ""

#: ipalib/plugins/cert.py:642 ipalib/plugins/internal.py:261
msgid "Error"
msgstr ""

#: ipalib/plugins/cert.py:657
msgid "Search for existing certificates."
msgstr ""

#: ipalib/plugins/cert.py:673
msgid "minimum serial number"
msgstr ""

#: ipalib/plugins/cert.py:679
msgid "maximum serial number"
msgstr ""

#: ipalib/plugins/cert.py:685
msgid "match the common name exactly"
msgstr ""

#: ipalib/plugins/cert.py:689
msgid "Valid not after from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:693
msgid "Valid not after to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:697
msgid "Valid not before from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:701
msgid "Valid not before to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:705
msgid "Issued on from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:709
msgid "Issued on to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:713
msgid "Revoked on from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:717
msgid "Revoked on to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:722
msgid "Maximum number of certs returned"
msgstr ""

#: ipalib/plugins/cert.py:738 ipalib/plugins/internal.py:380
#: ipalib/plugins/internal.py:489 ipalib/plugins/internal.py:576
#: ipalib/plugins/internal.py:696
msgid "Status"
msgstr ""

#: ipalib/plugins/cert.py:743
#, python-format
msgid "%(count)d certificate matched"
msgid_plural "%(count)d certificates matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/config.py:33
msgid ""
"\n"
"Server configuration\n"
"\n"
"Manage the default values that IPA uses and some of its tuning parameters.\n"
"\n"
"NOTES:\n"
"\n"
"The password notification value (--pwdexpnotify) is stored here so it will\n"
"be replicated. It is not currently used to notify users in advance of an\n"
"expiring password.\n"
"\n"
"Some attributes are read-only, provided only for information purposes. "
"These\n"
"include:\n"
"\n"
"Certificate Subject base: the configured certificate subject base,\n"
"  e.g. O=EXAMPLE.COM.  This is configurable only at install time.\n"
"Password plug-in features: currently defines additional hashes that the\n"
"  password will generate (there may be other conditions).\n"
"\n"
"When setting the order list for mapping SELinux users you may need to\n"
"quote the value so it isn't interpreted by the shell.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Show basic server configuration:\n"
"   ipa config-show\n"
"\n"
" Show all configuration options:\n"
"   ipa config-show --all\n"
"\n"
" Change maximum username length to 99 characters:\n"
"   ipa config-mod --maxusername=99\n"
"\n"
" Increase default time and size limits for maximum IPA server search:\n"
"   ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n"
"\n"
" Set default user e-mail domain:\n"
"   ipa config-mod --emaildomain=example.com\n"
"\n"
" Enable migration mode to make \"ipa migrate-ds\" command operational:\n"
"   ipa config-mod --enable-migration=TRUE\n"
"\n"
" Define SELinux user map order:\n"
"   ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-"
"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n"
msgstr ""

#: ipalib/plugins/config.py:83
msgid "searchtimelimit must be -1 or > 1."
msgstr ""

#: ipalib/plugins/config.py:91
msgid "configuration options"
msgstr ""

#: ipalib/plugins/config.py:124 ipalib/plugins/config.py:125
msgid "Configuration"
msgstr ""

#: ipalib/plugins/config.py:130
msgid "Maximum username length"
msgstr ""

#: ipalib/plugins/config.py:135
msgid "Home directory base"
msgstr ""

#: ipalib/plugins/config.py:136
msgid "Default location of home directories"
msgstr ""

#: ipalib/plugins/config.py:140
msgid "Default shell"
msgstr ""

#: ipalib/plugins/config.py:141
msgid "Default shell for new users"
msgstr ""

#: ipalib/plugins/config.py:145
msgid "Default users group"
msgstr ""

#: ipalib/plugins/config.py:146
msgid "Default group for new users"
msgstr ""

#: ipalib/plugins/config.py:150 ipalib/plugins/config.py:151
msgid "Default e-mail domain"
msgstr ""

#: ipalib/plugins/config.py:155
msgid "Search time limit"
msgstr ""

#: ipalib/plugins/config.py:156
msgid ""
"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)"
msgstr ""

#: ipalib/plugins/config.py:161
msgid "Search size limit"
msgstr ""

#: ipalib/plugins/config.py:162
msgid "Maximum number of records to search (-1 is unlimited)"
msgstr ""

#: ipalib/plugins/config.py:167
msgid "User search fields"
msgstr ""

#: ipalib/plugins/config.py:168
msgid "A comma-separated list of fields to search in when searching for users"
msgstr ""

#: ipalib/plugins/config.py:173
msgid "A comma-separated list of fields to search in when searching for groups"
msgstr ""

#: ipalib/plugins/config.py:177 ipalib/plugins/config.py:178
msgid "Enable migration mode"
msgstr ""

#: ipalib/plugins/config.py:182
msgid "Certificate Subject base"
msgstr ""

#: ipalib/plugins/config.py:183
msgid "Base for certificate subjects (OU=Test,O=Example)"
msgstr ""

#: ipalib/plugins/config.py:188
msgid "Default group objectclasses"
msgstr ""

#: ipalib/plugins/config.py:189
msgid "Default group objectclasses (comma-separated list)"
msgstr ""

#: ipalib/plugins/config.py:194
msgid "Default user objectclasses"
msgstr ""

#: ipalib/plugins/config.py:195
msgid "Default user objectclasses (comma-separated list)"
msgstr ""

#: ipalib/plugins/config.py:200
msgid "Password Expiration Notification (days)"
msgstr ""

#: ipalib/plugins/config.py:201
msgid "Number of days's notice of impending password expiration"
msgstr ""

#: ipalib/plugins/config.py:206
msgid "Password plugin features"
msgstr ""

#: ipalib/plugins/config.py:207
msgid "Extra hashes to generate in password plug-in"
msgstr ""

#: ipalib/plugins/config.py:213
msgid "SELinux user map order"
msgstr ""

#: ipalib/plugins/config.py:214
msgid "Order in increasing priority of SELinux users, delimited by $"
msgstr ""

#: ipalib/plugins/config.py:217
msgid "Default SELinux user"
msgstr ""

#: ipalib/plugins/config.py:218
msgid "Default SELinux user when no match is found in SELinux map rule"
msgstr ""

#: ipalib/plugins/config.py:222
msgid "Default PAC types"
msgstr ""

#: ipalib/plugins/config.py:223
msgid "Default types of PAC supported for services"
msgstr ""

#: ipalib/plugins/config.py:229
msgid "Default user authentication types"
msgstr ""

#: ipalib/plugins/config.py:230
msgid "Default types of supported user authentication"
msgstr ""

#: ipalib/plugins/config.py:243
msgid "Modify configuration options."
msgstr ""

#: ipalib/plugins/config.py:252
msgid "The group doesn't exist"
msgstr ""

#: ipalib/plugins/config.py:267
#, python-format
msgid "attribute \"%s\" not allowed"
msgstr ""

#: ipalib/plugins/config.py:275
msgid "May not be empty"
msgstr ""

#: ipalib/plugins/config.py:293
#, python-format
msgid "%(obj)s default attribute %(attr)s would not be allowed!"
msgstr ""

#: ipalib/plugins/config.py:325
msgid "A list of SELinux users delimited by $ expected"
msgstr ""

#: ipalib/plugins/config.py:329
#, python-format
msgid "SELinux user '%(user)s' is not valid: %(error)s"
msgstr ""

#: ipalib/plugins/config.py:341
msgid "SELinux user map default user not in order list"
msgstr ""

#: ipalib/plugins/config.py:349
msgid "Show the current configuration."
msgstr ""

#: ipalib/plugins/delegation.py:30
msgid ""
"\n"
"Group to Group Delegation\n"
"\n"
"A permission enables fine-grained delegation of permissions. Access Control\n"
"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
"given tasks such as adding a user, modifying a group, etc.\n"
"\n"
"Group to Group Delegations grants the members of one group to update a set\n"
"of attributes of members of another group.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a delegation rule to allow managers to edit employee's addresses:\n"
"   ipa delegation-add --attrs=street --group=managers --"
"membergroup=employees \"managers edit employees' street\"\n"
"\n"
" When managing the list of attributes you need to include all attributes\n"
" in the list, including existing ones. Add postalCode to the list:\n"
"   ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --"
"membergroup=employees \"managers edit employees' street\"\n"
"\n"
" Display our updated rule:\n"
"   ipa delegation-show \"managers edit employees' street\"\n"
"\n"
" Delete a rule:\n"
"   ipa delegation-del \"managers edit employees' street\"\n"
msgstr ""

#: ipalib/plugins/delegation.py:73
msgid "delegation"
msgstr ""

#: ipalib/plugins/delegation.py:74
msgid "delegations"
msgstr ""

#: ipalib/plugins/delegation.py:75
msgid "Delegations"
msgstr ""

#: ipalib/plugins/delegation.py:76
msgid "Delegation"
msgstr ""

#: ipalib/plugins/delegation.py:81 ipalib/plugins/delegation.py:82
msgid "Delegation name"
msgstr ""

#: ipalib/plugins/delegation.py:88 ipalib/plugins/selfservice.py:92
msgid "Permissions to grant (read, write). Default is write."
msgstr ""

#: ipalib/plugins/delegation.py:94
msgid "Attributes to which the delegation applies"
msgstr ""

#: ipalib/plugins/delegation.py:100
msgid "Member user group"
msgstr ""

#: ipalib/plugins/delegation.py:101
msgid "User group to apply delegation to"
msgstr ""

#: ipalib/plugins/delegation.py:134
msgid "Add a new delegation."
msgstr ""

#: ipalib/plugins/delegation.py:136
#, python-format
msgid "Added delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:155
msgid "Delete a delegation."
msgstr ""

#: ipalib/plugins/delegation.py:158
#, python-format
msgid "Deleted delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:173
msgid "Modify a delegation."
msgstr ""

#: ipalib/plugins/delegation.py:175
#, python-format
msgid "Modified delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:192
msgid "Search for delegations."
msgstr ""

#: ipalib/plugins/delegation.py:195
#, python-format
msgid "%(count)d delegation matched"
msgid_plural "%(count)d delegations matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/delegation.py:218
msgid "Display information about a delegation."
msgstr ""

#: ipalib/plugins/dns.py:49
msgid ""
"\n"
"Domain Name System (DNS)\n"
msgstr ""

#: ipalib/plugins/dns.py:51
msgid ""
"\n"
"Manage DNS zone and resource records.\n"
msgstr ""

#: ipalib/plugins/dns.py:53
msgid ""
"\n"
"SUPPORTED ZONE TYPES\n"
"\n"
" * Master zone (dnszone-*), contains authoritative data.\n"
" * Forward zone (dnsforwardzone-*), forwards queries to configured "
"forwarders\n"
" (a set of DNS servers).\n"
msgstr ""

#: ipalib/plugins/dns.py:59
msgid ""
"\n"
"USING STRUCTURED PER-TYPE OPTIONS\n"
msgstr ""

#: ipalib/plugins/dns.py:61
msgid ""
"\n"
"There are many structured DNS RR types where DNS data stored in LDAP server\n"
"is not just a scalar value, for example an IP address or a domain name, but\n"
"a data structure which may be often complex. A good example is a LOC record\n"
"[RFC1876] which consists of many mandatory and optional parts (degrees,\n"
"minutes, seconds of latitude and longitude, altitude or precision).\n"
msgstr ""

#: ipalib/plugins/dns.py:67
msgid ""
"\n"
"It may be difficult to manipulate such DNS records without making a mistake\n"
"and entering an invalid value. DNS module provides an abstraction over "
"these\n"
"raw records and allows to manipulate each RR type with specific options. "
"For\n"
"each supported RR type, DNS module provides a standard option to manipulate\n"
"a raw records with format --<rrtype>-rec, e.g. --mx-rec, and special "
"options\n"
"for every part of the RR structure with format --<rrtype>-<partname>, e.g.\n"
"--mx-preference and --mx-exchanger.\n"
msgstr ""

#: ipalib/plugins/dns.py:75
msgid ""
"\n"
"When adding a record, either RR specific options or standard option for a "
"raw\n"
"value can be used, they just should not be combined in one add operation. "
"When\n"
"modifying an existing entry, new RR specific options can be used to change\n"
"one part of a DNS record, where the standard option for raw value is used\n"
"to specify the modified value. The following example demonstrates\n"
"a modification of MX record preference from 0 to 1 in a record without\n"
"modifying the exchanger:\n"
"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n"
msgstr ""

#: ipalib/plugins/dns.py:84
msgid ""
"\n"
"\n"
"EXAMPLES:\n"
msgstr ""

#: ipalib/plugins/dns.py:87
msgid ""
"\n"
" Add new zone:\n"
"   ipa dnszone-add example.com --name-server=ns \\\n"
"                               --admin-email=admin@example.com \\\n"
"                               --ip-address=192.0.2.1\n"
msgstr ""

#: ipalib/plugins/dns.py:92
msgid ""
"\n"
" Add system permission that can be used for per-zone privilege delegation:\n"
"   ipa dnszone-add-permission example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:95
msgid ""
"\n"
" Modify the zone to allow dynamic updates for hosts own records in realm "
"EXAMPLE.COM:\n"
"   ipa dnszone-mod example.com --dynamic-update=TRUE\n"
msgstr ""

#: ipalib/plugins/dns.py:98
msgid ""
"\n"
"   This is the equivalent of:\n"
"     ipa dnszone-mod example.com --dynamic-update=TRUE \\\n"
"      --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM "
"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n"
msgstr ""

#: ipalib/plugins/dns.py:102
msgid ""
"\n"
" Modify the zone to allow zone transfers for local network only:\n"
"   ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n"
msgstr ""

#: ipalib/plugins/dns.py:105
msgid ""
"\n"
" Add new reverse zone specified by network IP address:\n"
"   ipa dnszone-add --name-from-ip=192.0.2.0/24 \\\n"
"                   --name-server=ns.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:109
msgid ""
"\n"
" Add second nameserver for example.com:\n"
"   ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:112
msgid ""
"\n"
" Add a mail server for example.com:\n"
"   ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n"
msgstr ""

#: ipalib/plugins/dns.py:115
msgid ""
"\n"
" Add another record using MX record specific options:\n"
"  ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n"
msgstr ""

#: ipalib/plugins/dns.py:118
msgid ""
"\n"
" Add another record using interactive mode (started when dnsrecord-add, "
"dnsrecord-mod,\n"
" or dnsrecord-del are executed with no options):\n"
"  ipa dnsrecord-add example.com @\n"
"  Please choose a type of DNS resource record to be added\n"
"  The most common types for this type of zone are: NS, MX, LOC\n"
"\n"
"  DNS resource record type: MX\n"
"  MX Preference: 30\n"
"  MX Exchanger: mail3\n"
"    Record name: example.com\n"
"    MX record: 10 mail1, 20 mail2, 30 mail3\n"
"    NS record: nameserver.example.com., nameserver2.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:131
msgid ""
"\n"
" Delete previously added nameserver from example.com:\n"
"   ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:134
msgid ""
"\n"
" Add LOC record for example.com:\n"
"   ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E "
"227.64m\"\n"
msgstr ""

#: ipalib/plugins/dns.py:137
msgid ""
"\n"
" Add new A record for www.example.com. Create a reverse record in "
"appropriate\n"
" reverse zone as well. In this case a PTR record \"2\" pointing to www."
"example.com\n"
" will be created in zone 2.0.192.in-addr.arpa.\n"
"   ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n"
msgstr ""

#: ipalib/plugins/dns.py:142
msgid ""
"\n"
" Add new PTR record for www.example.com\n"
"   ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:145
msgid ""
"\n"
" Add new SRV records for LDAP servers. Three quarters of the requests\n"
" should go to fast.example.com, one quarter to slow.example.com. If neither\n"
" is available, switch to backup.example.com.\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example."
"com\"\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example."
"com\"\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup."
"example.com\"\n"
msgstr ""

#: ipalib/plugins/dns.py:152
msgid ""
"\n"
" The interactive mode can be used for easy modification:\n"
"  ipa dnsrecord-mod example.com _ldap._tcp\n"
"  No option to modify specific record provided.\n"
"  Current DNS record contents:\n"
"\n"
"  SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 "
"backup.example.com\n"
"\n"
"  Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n"
"  Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n"
"  SRV Priority [0]:                     (keep the default value)\n"
"  SRV Weight [1]: 2                     (modified value)\n"
"  SRV Port [389]:                       (keep the default value)\n"
"  SRV Target [slow.example.com]:        (keep the default value)\n"
"  1 SRV record skipped. Only one value per DNS record type can be modified "
"at one time.\n"
"    Record name: _ldap._tcp\n"
"    SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 "
"389 slow.example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:169
msgid ""
"\n"
" After this modification, three fifths of the requests should go to\n"
" fast.example.com and two fifths to slow.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:172
msgid ""
"\n"
" An example of the interactive mode for dnsrecord-del command:\n"
"   ipa dnsrecord-del example.com www\n"
"   No option to delete specific record provided.\n"
"   Delete all? Yes/No (default No):     (do not delete all records)\n"
"   Current DNS record contents:\n"
"\n"
"   A record: 192.0.2.2, 192.0.2.3\n"
"\n"
"   Delete A record '192.0.2.2'? Yes/No (default No):\n"
"   Delete A record '192.0.2.3'? Yes/No (default No): y\n"
"     Record name: www\n"
"     A record: 192.0.2.2               (A record 192.0.2.3 has been "
"deleted)\n"
msgstr ""

#: ipalib/plugins/dns.py:185
msgid ""
"\n"
" Show zone example.com:\n"
"   ipa dnszone-show example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:188
msgid ""
"\n"
" Find zone with \"example\" in its domain name:\n"
"   ipa dnszone-find example\n"
msgstr ""

#: ipalib/plugins/dns.py:191
msgid ""
"\n"
" Find records for resources with \"www\" in their name in zone example.com:\n"
"   ipa dnsrecord-find example.com www\n"
msgstr ""

#: ipalib/plugins/dns.py:194
msgid ""
"\n"
" Find A records with value 192.0.2.2 in zone example.com\n"
"   ipa dnsrecord-find example.com --a-rec=192.0.2.2\n"
msgstr ""

#: ipalib/plugins/dns.py:197
msgid ""
"\n"
" Show records for resource www in zone example.com\n"
"   ipa dnsrecord-show example.com www\n"
msgstr ""

#: ipalib/plugins/dns.py:200
msgid ""
"\n"
" Delegate zone sub.example to another nameserver:\n"
"   ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n"
"   ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n"
msgstr ""

#: ipalib/plugins/dns.py:204
msgid ""
"\n"
" Delete zone example.com with all resource records:\n"
"   ipa dnszone-del example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:207
msgid ""
"\n"
" If a global forwarder is configured, all queries for which this server is "
"not\n"
" authoritative (e.g. sub.example.com) will be routed to the global "
"forwarder.\n"
" Global forwarding configuration can be overridden per-zone.\n"
msgstr ""

#: ipalib/plugins/dns.py:211
msgid ""
"\n"
" Semantics of forwarding in IPA matches BIND sematics and depends on type\n"
" of the zone:\n"
"   * Master zone: local BIND replies authoritatively to queries for data in\n"
"   the given zone (including authoritative NXDOMAIN answers) and forwarding\n"
"   affects only queries for names bellow zone cuts (NS records) of locally\n"
"   served zones.\n"
"\n"
"   * Forward zone: forward zone contains no authoritative data. BIND "
"forwards\n"
"   queries, which cannot be answered from its local cache, to configured\n"
"   forwarders.\n"
msgstr ""

#: ipalib/plugins/dns.py:222
msgid ""
"\n"
" Semantics of the --forwarder-policy option:\n"
"   * none - disable forwarding for the given zone.\n"
"   * first - forward all queries to configured forwarders. If they fail,\n"
"   do resolution using DNS root servers.\n"
"   * only - forward all queries to configured forwarders and if they fail,\n"
"   return failure.\n"
msgstr ""

#: ipalib/plugins/dns.py:229
msgid ""
"\n"
" Disable global forwarding for given sub-tree:\n"
"   ipa dnszone-mod example.com --forward-policy=none\n"
msgstr ""

#: ipalib/plugins/dns.py:232
msgid ""
"\n"
" This configuration forwards all queries for names outside the example.com\n"
" sub-tree to global forwarders. Normal recursive resolution process is used\n"
" for names inside the example.com sub-tree (i.e. NS records are followed "
"etc.).\n"
msgstr ""

#: ipalib/plugins/dns.py:236
msgid ""
"\n"
" Forward all requests for the zone external.example.com to another "
"forwarder\n"
" using a \"first\" policy (it will send the queries to the selected "
"forwarder\n"
" and if not answered it will use global root servers):\n"
"   ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n"
"                               --forwarder=203.0.113.1\n"
msgstr ""

#: ipalib/plugins/dns.py:242
msgid ""
"\n"
" Change forward-policy for external.example.com:\n"
"   ipa dnsforwardzone-mod external.example.com --forward-policy=only\n"
msgstr ""

#: ipalib/plugins/dns.py:245
msgid ""
"\n"
" Show forward zone external.example.com:\n"
"   ipa dnsforwardzone-show external.example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:248
msgid ""
"\n"
" List all forward zones:\n"
"   ipa dnsforwardzone-find\n"
msgstr ""

#: ipalib/plugins/dns.py:251
msgid ""
"\n"
" Delete forward zone external.example.com:\n"
"   ipa dnsforwardzone-del external.example.com\n"
msgstr ""

#: ipalib/plugins/dns.py:254
msgid ""
"\n"
" Resolve a host name to see if it exists (will add default IPA domain\n"
" if one is not included):\n"
"   ipa dns-resolve www.example.com\n"
"   ipa dns-resolve www\n"
msgstr ""

#: ipalib/plugins/dns.py:259
msgid ""
"\n"
"\n"
"GLOBAL DNS CONFIGURATION\n"
msgstr ""

#: ipalib/plugins/dns.py:262
msgid ""
"\n"
"DNS configuration passed to command line install script is stored in a "
"local\n"
"configuration file on each IPA server where DNS service is configured. "
"These\n"
"local settings can be overridden with a common configuration stored in LDAP\n"
"server:\n"
msgstr ""

#: ipalib/plugins/dns.py:267
msgid ""
"\n"
" Show global DNS configuration:\n"
"   ipa dnsconfig-show\n"
msgstr ""

#: ipalib/plugins/dns.py:270
msgid ""
"\n"
" Modify global DNS configuration and set a list of global forwarders:\n"
"   ipa dnsconfig-mod --forwarder=203.0.113.113\n"
msgstr ""

#: ipalib/plugins/dns.py:309
msgid "Permission value"
msgstr ""

#: ipalib/plugins/dns.py:355
#, python-format
msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!"
msgstr ""

#: ipalib/plugins/dns.py:358
msgid "invalid IP address format"
msgstr ""

#: ipalib/plugins/dns.py:371
msgid "invalid IP network format"
msgstr ""

#: ipalib/plugins/dns.py:380
msgid "each ACL element must be terminated with a semicolon"
msgstr ""

#: ipalib/plugins/dns.py:397
msgid "invalid address format"
msgstr ""

#: ipalib/plugins/dns.py:447
#, python-format
msgid "%(port)s is not a valid port"
msgstr ""

#: ipalib/plugins/dns.py:458
msgid ""
"expected format: <0-255> <0-255> <0-65535> even-"
"length_hexadecimal_digits_or_hyphen"
msgstr ""

#: ipalib/plugins/dns.py:467
msgid "algorithm value: allowed interval 0-255"
msgstr ""

#: ipalib/plugins/dns.py:470
msgid "flags value: allowed interval 0-255"
msgstr ""

#: ipalib/plugins/dns.py:473
msgid "iterations value: allowed interval 0-65535"
msgstr ""

#: ipalib/plugins/dns.py:481
#, python-format
msgid "salt value: %(err)s"
msgstr ""

#: ipalib/plugins/dns.py:488
msgid "invalid domain-name: not fully qualified"
msgstr ""

#: ipalib/plugins/dns.py:543
#, python-format
msgid "DNS reverse zone for IP address %(addr)s not found"
msgstr ""

#: ipalib/plugins/dns.py:558
#, python-format
msgid "DNS zone %(zone)s not found"
msgstr ""

#: ipalib/plugins/dns.py:572
#, python-format
msgid "IP address %(ip)s is already assigned in domain %(domain)s."
msgstr ""

#: ipalib/plugins/dns.py:585
#, python-format
msgid ""
"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s."
msgstr ""

#: ipalib/plugins/dns.py:662
#, python-format
msgid "%s record"
msgstr ""

#: ipalib/plugins/dns.py:664
#, python-format
msgid "Raw %s records"
msgstr ""

#: ipalib/plugins/dns.py:665
#, python-format
msgid "%s Record"
msgstr ""

#: ipalib/plugins/dns.py:666
#, python-format
msgid "(see RFC %s for details)"
msgstr ""

#: ipalib/plugins/dns.py:731
#, python-format
msgid "'%s' is a required part of DNS record"
msgstr ""

#: ipalib/plugins/dns.py:738
msgid "Invalid number of parts!"
msgstr ""

#: ipalib/plugins/dns.py:793
#, python-format
msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin"
msgstr ""

#: ipalib/plugins/dns.py:809
#, python-format
msgid "format must be specified as \"%(format)s\" %(rfcs)s"
msgstr ""

#: ipalib/plugins/dns.py:933
msgid "Create reverse"
msgstr ""

#: ipalib/plugins/dns.py:934
msgid "Create reverse record for this IP Address"
msgstr ""

#: ipalib/plugins/dns.py:969
#, python-format
msgid "Cannot create reverse record for \"%(value)s\": %(exc)s"
msgstr ""

#: ipalib/plugins/dns.py:978 ipalib/plugins/dns.py:1001
#: ipalib/plugins/host.py:525
msgid "IP Address"
msgstr ""

#: ipalib/plugins/dns.py:987 ipalib/plugins/dns.py:1530
msgid "Record data"
msgstr ""

#: ipalib/plugins/dns.py:1010
msgid "Subtype"
msgstr ""

#: ipalib/plugins/dns.py:1015 ipalib/plugins/dns.py:1053
#: ipalib/plugins/dns.py:1292 ipalib/plugins/dns.py:1356
#: ipalib/plugins/dns.py:3691
msgid "Hostname"
msgstr ""

#: ipalib/plugins/dns.py:1029
msgid "Certificate Type"
msgstr ""

#: ipalib/plugins/dns.py:1034 ipalib/plugins/dns.py:1082
msgid "Key Tag"
msgstr ""

#: ipalib/plugins/dns.py:1039 ipalib/plugins/dns.py:1087
#: ipalib/plugins/dns.py:1419 ipalib/plugins/otptoken.py:198
msgid "Algorithm"
msgstr ""

#: ipalib/plugins/dns.py:1044
msgid "Certificate/CRL"
msgstr ""

#: ipalib/plugins/dns.py:1054
msgid "A hostname which this alias hostname points to"
msgstr ""

#: ipalib/plugins/dns.py:1068 ipalib/plugins/dns.py:1386
#: ipalib/plugins/internal.py:523
msgid "Target"
msgstr ""

#: ipalib/plugins/dns.py:1092
msgid "Digest Type"
msgstr ""

#: ipalib/plugins/dns.py:1097
msgid "Digest"
msgstr ""

#: ipalib/plugins/dns.py:1130 ipalib/plugins/dns.py:1275
#: ipalib/plugins/dns.py:1330
msgid "Preference"
msgstr ""

#: ipalib/plugins/dns.py:1131 ipalib/plugins/dns.py:1276
msgid "Preference given to this exchanger. Lower values are more preferred"
msgstr ""

#: ipalib/plugins/dns.py:1136 ipalib/plugins/dns.py:1281
msgid "Exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1137
msgid "A host willing to act as a key exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1146
msgid "Degrees Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1151
msgid "Minutes Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1156
msgid "Seconds Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1162
msgid "Direction Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1166
msgid "Degrees Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1171
msgid "Minutes Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1176
msgid "Seconds Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1182
msgid "Direction Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1186
msgid "Altitude"
msgstr ""

#: ipalib/plugins/dns.py:1192
msgid "Size"
msgstr ""

#: ipalib/plugins/dns.py:1198
msgid "Horizontal Precision"
msgstr ""

#: ipalib/plugins/dns.py:1204
msgid "Vertical Precision"
msgstr ""

#: ipalib/plugins/dns.py:1211
msgid ""
"format must be specified as\n"
"    \"d1 [m1 [s1]] {\"N\"|\"S\"}  d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] "
"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n"
"    where:\n"
"       d1:     [0 .. 90]            (degrees latitude)\n"
"       d2:     [0 .. 180]           (degrees longitude)\n"
"       m1, m2: [0 .. 59]            (minutes latitude/longitude)\n"
"       s1, s2: [0 .. 59.999]        (seconds latitude/longitude)\n"
"       alt:    [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n"
"       siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n"
"    See RFC 1876 for details"
msgstr ""

#: ipalib/plugins/dns.py:1265
#, python-format
msgid "'%(required)s' must not be empty when '%(name)s' is set"
msgstr ""

#: ipalib/plugins/dns.py:1282
msgid "A host willing to act as a mail exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1317
msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\""
msgstr ""

#: ipalib/plugins/dns.py:1325
msgid "Order"
msgstr ""

#: ipalib/plugins/dns.py:1336
msgid "Flags"
msgstr ""

#: ipalib/plugins/dns.py:1340 ipalib/plugins/hbactest.py:269
#: ipalib/plugins/internal.py:575 ipalib/plugins/service.py:366
msgid "Service"
msgstr ""

#: ipalib/plugins/dns.py:1343
msgid "Regular Expression"
msgstr ""

#: ipalib/plugins/dns.py:1346
msgid "Replacement"
msgstr ""

#: ipalib/plugins/dns.py:1357
msgid "The hostname this reverse record points to"
msgstr ""

#: ipalib/plugins/dns.py:1371 ipalib/plugins/pwpolicy.py:346
msgid "Priority"
msgstr ""

#: ipalib/plugins/dns.py:1376
msgid "Weight"
msgstr ""

#: ipalib/plugins/dns.py:1381
msgid "Port"
msgstr ""

#: ipalib/plugins/dns.py:1387
msgid ""
"The domain name of the target host or '.' if the service is decidedly not "
"available at this domain"
msgstr ""

#: ipalib/plugins/dns.py:1396
msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format"
msgstr ""

#: ipalib/plugins/dns.py:1424
msgid "Fingerprint Type"
msgstr ""

#: ipalib/plugins/dns.py:1429
msgid "Fingerprint"
msgstr ""

#: ipalib/plugins/dns.py:1443
msgid "Certificate Usage"
msgstr ""

#: ipalib/plugins/dns.py:1448
msgid "Selector"
msgstr ""

#: ipalib/plugins/dns.py:1453
msgid "Matching Type"
msgstr ""

#: ipalib/plugins/dns.py:1458
msgid "Certificate Association Data"
msgstr ""

#: ipalib/plugins/dns.py:1476
msgid "Text Data"
msgstr ""

#: ipalib/plugins/dns.py:1524
msgid "Records"
msgstr ""

#: ipalib/plugins/dns.py:1527
msgid "Record type"
msgstr ""

#: ipalib/plugins/dns.py:1562
#, python-format
msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record"
msgstr ""

#: ipalib/plugins/dns.py:1581
msgid "Managedby permission"
msgstr ""

#: ipalib/plugins/dns.py:1736
msgid "Zone name"
msgstr ""

#: ipalib/plugins/dns.py:1737
msgid "Zone name (FQDN)"
msgstr ""

#: ipalib/plugins/dns.py:1743
msgid "Reverse zone IP network"
msgstr ""

#: ipalib/plugins/dns.py:1744
msgid "IP network to create reverse zone name from"
msgstr ""

#: ipalib/plugins/dns.py:1749
msgid "Active zone"
msgstr ""

#: ipalib/plugins/dns.py:1750
msgid "Is zone active?"
msgstr ""

#: ipalib/plugins/dns.py:1757
msgid "Zone forwarders"
msgstr ""

#: ipalib/plugins/dns.py:1758
msgid ""
"Per-zone forwarders. A custom port can be specified for each forwarder using "
"a standard format \"IP_ADDRESS port PORT\""
msgstr ""

#: ipalib/plugins/dns.py:1764 ipalib/plugins/dns.py:3760
msgid "Forward policy"
msgstr ""

#: ipalib/plugins/dns.py:1765
msgid ""
"Per-zone conditional forwarding policy. Set to \"none\" to disable "
"forwarding to global forwarder for this zone. In that case, conditional zone "
"forwarders are disregarded."
msgstr ""

#: ipalib/plugins/dns.py:1837
msgid "DNS is not configured"
msgstr ""

#: ipalib/plugins/dns.py:1848
msgid "Only one zone type is allowed per zone name"
msgstr ""

#: ipalib/plugins/dns.py:1878 ipalib/plugins/dns.py:2488
msgid "Search for DNS zones (SOA records)."
msgstr ""

#: ipalib/plugins/dns.py:1965
#, python-format
msgid "Added system permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:1992
#, python-format
msgid "permission \"%(value)s\" already exists"
msgstr ""

#: ipalib/plugins/dns.py:2020
#, python-format
msgid "Removed system permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2059
msgid "DNS zone"
msgstr ""

#: ipalib/plugins/dns.py:2060
msgid "DNS zones"
msgstr ""

#: ipalib/plugins/dns.py:2067
msgid "DNS Zones"
msgstr ""

#: ipalib/plugins/dns.py:2068
msgid "DNS Zone"
msgstr ""

#: ipalib/plugins/dns.py:2073
msgid "Authoritative nameserver"
msgstr ""

#: ipalib/plugins/dns.py:2074
msgid "Authoritative nameserver domain name"
msgstr ""

#: ipalib/plugins/dns.py:2080 ipalib/plugins/dns.py:2081
msgid "Administrator e-mail address"
msgstr ""

#: ipalib/plugins/dns.py:2088
msgid "SOA serial"
msgstr ""

#: ipalib/plugins/dns.py:2089
msgid "SOA record serial number"
msgstr ""

#: ipalib/plugins/dns.py:2097
msgid "SOA refresh"
msgstr ""

#: ipalib/plugins/dns.py:2098
msgid "SOA record refresh time"
msgstr ""

#: ipalib/plugins/dns.py:2106
msgid "SOA retry"
msgstr ""

#: ipalib/plugins/dns.py:2107
msgid "SOA record retry time"
msgstr ""

#: ipalib/plugins/dns.py:2115
msgid "SOA expire"
msgstr ""

#: ipalib/plugins/dns.py:2116
msgid "SOA record expire time"
msgstr ""

#: ipalib/plugins/dns.py:2124
msgid "SOA minimum"
msgstr ""

#: ipalib/plugins/dns.py:2125
msgid "How long should negative responses be cached"
msgstr ""

#: ipalib/plugins/dns.py:2133 ipalib/plugins/dns.py:2588
#: ipalib/plugins/dns.py:2589
msgid "Time to live"
msgstr ""

#: ipalib/plugins/dns.py:2134
msgid "Time to live for records at zone apex"
msgstr ""

#: ipalib/plugins/dns.py:2140
msgid "SOA class"
msgstr ""

#: ipalib/plugins/dns.py:2141
msgid "SOA record class"
msgstr ""

#: ipalib/plugins/dns.py:2146 ipalib/plugins/dns.py:2147
msgid "BIND update policy"
msgstr ""

#: ipalib/plugins/dns.py:2153
msgid "Dynamic update"
msgstr ""

#: ipalib/plugins/dns.py:2154
msgid "Allow dynamic updates."
msgstr ""

#: ipalib/plugins/dns.py:2163
msgid "Allow query"
msgstr ""

#: ipalib/plugins/dns.py:2164
msgid ""
"Semicolon separated list of IP addresses or networks which are allowed to "
"issue queries"
msgstr ""

#: ipalib/plugins/dns.py:2172
msgid "Allow transfer"
msgstr ""

#: ipalib/plugins/dns.py:2173
msgid ""
"Semicolon separated list of IP addresses or networks which are allowed to "
"transfer the zone"
msgstr ""

#: ipalib/plugins/dns.py:2179 ipalib/plugins/dns.py:3767
msgid "Allow PTR sync"
msgstr ""

#: ipalib/plugins/dns.py:2180
msgid ""
"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the "
"zone"
msgstr ""

#: ipalib/plugins/dns.py:2185
msgid "Allow in-line DNSSEC signing"
msgstr ""

#: ipalib/plugins/dns.py:2186
msgid "Allow inline DNSSEC signing of records in the zone"
msgstr ""

#: ipalib/plugins/dns.py:2191
msgid "NSEC3PARAM record"
msgstr ""

#: ipalib/plugins/dns.py:2192
msgid ""
"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt"
msgstr ""

#: ipalib/plugins/dns.py:2292
msgid ""
"Manual configuration needed, please visit 'http://www.freeipa.org/page/"
"Releases/4.0.0#Experimental_DNSSEC_Support'"
msgstr ""

#: ipalib/plugins/dns.py:2299
msgid ""
"If you encounter any problems please report them and restart 'named' service "
"on affected IPA server."
msgstr ""

#: ipalib/plugins/dns.py:2307
msgid "Create new DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:2311 ipalib/plugins/dns.py:2460
#: ipalib/plugins/dns.py:3080 ipalib/plugins/host.py:517
#: ipalib/plugins/permission.py:996 ipalib/plugins/realmdomains.py:124
#: ipalib/plugins/service.py:419
msgid "Force"
msgstr ""

#: ipalib/plugins/dns.py:2312
msgid "Force DNS zone creation even if nameserver is not resolvable."
msgstr ""

#: ipalib/plugins/dns.py:2315
msgid "Add forward record for nameserver located in the created zone"
msgstr ""

#: ipalib/plugins/dns.py:2316 ipalib/plugins/dns.py:2345
msgid "Nameserver IP address"
msgstr ""

#: ipalib/plugins/dns.py:2360
msgid "Nameserver address is not a domain name"
msgstr ""

#: ipalib/plugins/dns.py:2372
msgid "Nameserver for reverse zone cannot be a relative DNS name"
msgstr ""

#: ipalib/plugins/dns.py:2376
msgid "Nameserver DNS record is created for for forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:2381
msgid "Nameserver DNS record is created only for nameservers in current zone"
msgstr ""

#: ipalib/plugins/dns.py:2430
msgid "Delete DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:2432
#, python-format
msgid "Deleted DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2456
msgid "Modify DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:2461
msgid "Force nameserver change even if nameserver not in DNS"
msgstr ""

#: ipalib/plugins/dns.py:2492
msgid "Forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:2494
msgid "Search for forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:2526
msgid "Display information about a DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:2542
msgid "Disable DNS Zone."
msgstr ""

#: ipalib/plugins/dns.py:2543
#, python-format
msgid "Disabled DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2548
msgid "Enable DNS Zone."
msgstr ""

#: ipalib/plugins/dns.py:2549
#, python-format
msgid "Enabled DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2554
msgid "Add a permission for per-zone access delegation."
msgstr ""

#: ipalib/plugins/dns.py:2559
msgid "Remove a permission for per-zone access delegation."
msgstr ""

#: ipalib/plugins/dns.py:2569
msgid "DNS resource record"
msgstr ""

#: ipalib/plugins/dns.py:2570
msgid "DNS resource records"
msgstr ""

#: ipalib/plugins/dns.py:2576
msgid "DNS Resource Records"
msgstr ""

#: ipalib/plugins/dns.py:2577
msgid "DNS Resource Record"
msgstr ""

#: ipalib/plugins/dns.py:2582 ipalib/plugins/dns.py:2583
msgid "Record name"
msgstr ""

#: ipalib/plugins/dns.py:2593 ipalib/plugins/host.py:448
#: ipalib/plugins/user.py:585
msgid "Class"
msgstr ""

#: ipalib/plugins/dns.py:2594
msgid "DNS class"
msgstr ""

#: ipalib/plugins/dns.py:2600
msgid "Structured"
msgstr ""

#: ipalib/plugins/dns.py:2601
msgid "Parse all raw DNS records and return them in a structured way"
msgstr ""

#: ipalib/plugins/dns.py:2619
msgid ""
"out-of-zone data: record name must be a subdomain of the zone or a relative "
"name"
msgstr ""

#: ipalib/plugins/dns.py:2646
#, python-format
msgid ""
"Reverse zone for PTR record should be a sub-zone of one the following fully "
"qualified domains: %s"
msgstr ""

#: ipalib/plugins/dns.py:2661
#, python-format
msgid ""
"Reverse zone %(name)s requires exactly %(count)d IP address components, "
"%(user_count)d given"
msgstr ""

#: ipalib/plugins/dns.py:2702
msgid "only master zones can contain records"
msgstr ""

#: ipalib/plugins/dns.py:2871
msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)"
msgstr ""

#: ipalib/plugins/dns.py:2877
msgid ""
"CNAME record is not allowed to coexist with any other record (RFC 1034, "
"section 3.6.2)"
msgstr ""

#: ipalib/plugins/dns.py:2889
msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)"
msgstr ""

#: ipalib/plugins/dns.py:2894
msgid ""
"DNAME record is not allowed to coexist with an NS record except when located "
"in a zone root record (RFC 6672, section 2.3)"
msgstr ""

#: ipalib/plugins/dns.py:3074
msgid "Add new DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:3082
msgid "force NS record creation even if its hostname is not in DNS"
msgstr ""

#: ipalib/plugins/dns.py:3129
msgid "Please choose a type of DNS resource record to be added"
msgstr ""

#: ipalib/plugins/dns.py:3130
#, python-format
msgid "The most common types for this type of zone are: %s\n"
msgstr ""

#: ipalib/plugins/dns.py:3135
msgid "DNS resource record type"
msgstr ""

#: ipalib/plugins/dns.py:3151
#, python-format
msgid "Invalid or unsupported type. Allowed values are: %s"
msgstr ""

#: ipalib/plugins/dns.py:3179
#, python-format
msgid "Raw value of a DNS record was already set by \"%(name)s\" option"
msgstr ""

#: ipalib/plugins/dns.py:3281
msgid "Modify a DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:3298
msgid "DNS zone root record cannot be renamed"
msgstr ""

#: ipalib/plugins/dns.py:3316
msgid "DNS records can be only updated one at a time"
msgstr ""

#: ipalib/plugins/dns.py:3407
msgid "No option to modify specific record provided."
msgstr ""

#: ipalib/plugins/dns.py:3410 ipalib/plugins/dns.py:3596
msgid "Current DNS record contents:\n"
msgstr ""

#: ipalib/plugins/dns.py:3432
#, python-format
msgid "Modify %(name)s '%(value)s'?"
msgstr ""

#: ipalib/plugins/dns.py:3440
#, python-format
msgid ""
"%(count)d %(type)s record skipped. Only one value per DNS record type can be "
"modified at one time."
msgid_plural ""
"%(count)d %(type)s records skipped. Only one value per DNS record type can "
"be modified at one time."
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/dns.py:3452
#, python-format
msgid "Deleted record \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:3459
msgid "Delete DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:3463
msgid ""
"Neither --del-all nor options to delete a specific record provided.\n"
"Command help may be consulted for all supported record types."
msgstr ""

#: ipalib/plugins/dns.py:3469
msgid "Delete all associated records"
msgstr ""

#: ipalib/plugins/dns.py:3538
#, python-format
msgid "Zone record '%s' cannot be deleted"
msgstr ""

#: ipalib/plugins/dns.py:3588
msgid "No option to delete specific record provided."
msgstr ""

#: ipalib/plugins/dns.py:3589
msgid "Delete all?"
msgstr ""

#: ipalib/plugins/dns.py:3617
#, python-format
msgid "Delete %(name)s '%(value)s'?"
msgstr ""

#: ipalib/plugins/dns.py:3628
msgid "Display DNS resource."
msgstr ""

#: ipalib/plugins/dns.py:3645
msgid "Search for DNS resources."
msgstr ""

#: ipalib/plugins/dns.py:3684
msgid "Resolve a host name in DNS."
msgstr ""

#: ipalib/plugins/dns.py:3687
#, python-format
msgid "Found '%(value)s'"
msgstr ""

#: ipalib/plugins/dns.py:3704
#, python-format
msgid "Host '%(host)s' not found"
msgstr ""

#: ipalib/plugins/dns.py:3741
msgid "DNS configuration options"
msgstr ""

#: ipalib/plugins/dns.py:3746 ipalib/plugins/dns.py:3747
msgid "DNS Global Configuration"
msgstr ""

#: ipalib/plugins/dns.py:3753
msgid "Global forwarders"
msgstr ""

#: ipalib/plugins/dns.py:3754
msgid ""
"Global forwarders. A custom port can be specified for each forwarder using a "
"standard format \"IP_ADDRESS port PORT\""
msgstr ""

#: ipalib/plugins/dns.py:3761
msgid ""
"Global forwarding policy. Set to \"none\" to disable any configured global "
"forwarders."
msgstr ""

#: ipalib/plugins/dns.py:3768
msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records"
msgstr ""

#: ipalib/plugins/dns.py:3772
msgid "Zone refresh interval"
msgstr ""

#: ipalib/plugins/dns.py:3816
msgid "Global DNS configuration is empty"
msgstr ""

#: ipalib/plugins/dns.py:3822
msgid "Modify global DNS configuration."
msgstr ""

#: ipalib/plugins/dns.py:3833
msgid "Show the current global DNS configuration."
msgstr ""

#: ipalib/plugins/dns.py:3846
msgid "DNS forward zone"
msgstr ""

#: ipalib/plugins/dns.py:3847
msgid "DNS forward zones"
msgstr ""

#: ipalib/plugins/dns.py:3849
msgid "DNS Forward Zones"
msgstr ""

#: ipalib/plugins/dns.py:3850
msgid "DNS Forward Zone"
msgstr ""

#: ipalib/plugins/dns.py:3859
msgid "Create new DNS forward zone."
msgstr ""

#: ipalib/plugins/dns.py:3873 ipalib/plugins/dns.py:3913
msgid "Please specify forwarders."
msgstr ""

#: ipalib/plugins/dns.py:3880
msgid "Delete DNS forward zone."
msgstr ""

#: ipalib/plugins/dns.py:3882
#, python-format
msgid "Deleted DNS forward zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:3887
msgid "Modify DNS forward zone."
msgstr ""

#: ipalib/plugins/dns.py:3920
msgid "Search for DNS forward zones."
msgstr ""

#: ipalib/plugins/dns.py:3925
msgid "Display information about a DNS forward zone."
msgstr ""

#: ipalib/plugins/dns.py:3932
msgid "Disable DNS Forward Zone."
msgstr ""

#: ipalib/plugins/dns.py:3933
#, python-format
msgid "Disabled DNS forward zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:3938
msgid "Enable DNS Forward Zone."
msgstr ""

#: ipalib/plugins/dns.py:3939
#, python-format
msgid "Enabled DNS forward zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:3944
msgid "Add a permission for per-forward zone access delegation."
msgstr ""

#: ipalib/plugins/dns.py:3949
msgid "Remove a permission for per-forward zone access delegation."
msgstr ""

#: ipalib/plugins/group.py:34
msgid ""
"\n"
"Groups of users\n"
"\n"
"Manage groups of users. By default, new groups are POSIX groups. You\n"
"can add the --nonposix option to the group-add command to mark a new group\n"
"as non-POSIX. You can use the --posix argument with the group-mod command\n"
"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n"
"converted to non-POSIX groups.\n"
"\n"
"Every group must have a description.\n"
"\n"
"POSIX groups must have a Group ID (GID) number. Changing a GID is\n"
"supported but can have an impact on your file permissions. It is not "
"necessary\n"
"to supply a GID when creating a group. IPA will generate one automatically\n"
"if it is not provided.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new group:\n"
"   ipa group-add --desc='local administrators' localadmins\n"
"\n"
" Add a new non-POSIX group:\n"
"   ipa group-add --nonposix --desc='remote administrators' remoteadmins\n"
"\n"
" Convert a non-POSIX group to posix:\n"
"   ipa group-mod --posix remoteadmins\n"
"\n"
" Add a new POSIX group with a specific Group ID number:\n"
"   ipa group-add --gid=500 --desc='unix admins' unixadmins\n"
"\n"
" Add a new POSIX group and let IPA assign a Group ID number:\n"
"   ipa group-add --desc='printer admins' printeradmins\n"
"\n"
" Remove a group:\n"
"   ipa group-del unixadmins\n"
"\n"
" To add the \"remoteadmins\" group to the \"localadmins\" group:\n"
"   ipa group-add-member --groups=remoteadmins localadmins\n"
"\n"
" Add multiple users to the \"localadmins\" group:\n"
"   ipa group-add-member --users=test1 --users=test2 localadmins\n"
"\n"
" Remove a user from the \"localadmins\" group:\n"
"   ipa group-remove-member --users=test2 localadmins\n"
"\n"
" Display information about a named group.\n"
"   ipa group-show localadmins\n"
"\n"
"External group membership is designed to allow users from trusted domains\n"
"to be mapped to local POSIX groups in order to actually use IPA resources.\n"
"External members should be added to groups that specifically created as\n"
"external and non-POSIX. Such group later should be included into one of "
"POSIX\n"
"groups.\n"
"\n"
"An external group member is currently a Security Identifier (SID) as defined "
"by\n"
"the trusted domain. When adding external group members, it is possible to\n"
"specify them in either SID, or DOM\\name, or name@domain format. IPA will "
"attempt\n"
"to resolve passed name to SID with the use of Global Catalog of the trusted "
"domain.\n"
"\n"
"Example:\n"
"\n"
"1. Create group for the trusted domain admins' mapping and their local POSIX "
"group:\n"
"\n"
"   ipa group-add --desc='<ad.domain> admins external map' ad_admins_external "
"--external\n"
"   ipa group-add --desc='<ad.domain> admins' ad_admins\n"
"\n"
"2. Add security identifier of Domain Admins of the <ad.domain> to the "
"ad_admins_external\n"
"   group:\n"
"\n"
"   ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n"
"\n"
"3. Allow members of ad_admins_external group to be associated with ad_admins "
"POSIX group:\n"
"\n"
"   ipa group-add-member ad_admins --groups ad_admins_external\n"
"\n"
"4. List members of external members of ad_admins_external group to see their "
"SIDs:\n"
"\n"
"   ipa group-show ad_admins_external\n"
msgstr ""

#: ipalib/plugins/group.py:125 ipalib/plugins/group.py:295
#: ipalib/plugins/group.py:532 ipalib/plugins/user.py:204
msgid "group"
msgstr ""

#: ipalib/plugins/group.py:126
msgid "groups"
msgstr ""

#: ipalib/plugins/group.py:207 ipalib/plugins/hbacrule.py:244
#: ipalib/plugins/internal.py:512 ipalib/plugins/selinuxusermap.py:238
#: ipalib/plugins/sudorule.py:271
msgid "User Groups"
msgstr ""

#: ipalib/plugins/group.py:208
msgid "User Group"
msgstr ""

#: ipalib/plugins/group.py:216
msgid "Group name"
msgstr ""

#: ipalib/plugins/group.py:223 ipalib/plugins/sudocmdgroup.py:123
msgid "Group description"
msgstr ""

#: ipalib/plugins/group.py:227 ipalib/plugins/user.py:519
msgid "GID"
msgstr ""

#: ipalib/plugins/group.py:228
msgid "GID (use this option to set it manually)"
msgstr ""

#: ipalib/plugins/group.py:236
msgid "External member"
msgstr ""

#: ipalib/plugins/group.py:237
msgid "Members of a trusted domain in DOM\\name or name@domain form"
msgstr ""

#: ipalib/plugins/group.py:245
msgid "Create a new group."
msgstr ""

#: ipalib/plugins/group.py:247
#, python-format
msgid "Added group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:252
msgid "Create as a non-POSIX group"
msgstr ""

#: ipalib/plugins/group.py:257
msgid "Allow adding external non-IPA members from trusted domains"
msgstr ""

#: ipalib/plugins/group.py:280
msgid "Delete group."
msgstr ""

#: ipalib/plugins/group.py:282
#, python-format
msgid "Deleted group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:296
msgid "privileged group"
msgstr ""

#: ipalib/plugins/group.py:313
msgid "Modify a group."
msgstr ""

#: ipalib/plugins/group.py:315
#, python-format
msgid "Modified group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:320
msgid "change to a POSIX group"
msgstr ""

#: ipalib/plugins/group.py:324
msgid "change to support external non-IPA members from trusted domains"
msgstr ""

#: ipalib/plugins/group.py:384
msgid "Search for groups."
msgstr ""

#: ipalib/plugins/group.py:389
#, python-format
msgid "%(count)d group matched"
msgid_plural "%(count)d groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/group.py:395
msgid "search for private groups"
msgstr ""

#: ipalib/plugins/group.py:399
msgid "search for POSIX groups"
msgstr ""

#: ipalib/plugins/group.py:403
msgid ""
"search for groups with support of external non-IPA members from trusted "
"domains"
msgstr ""

#: ipalib/plugins/group.py:407
msgid "search for non-POSIX groups"
msgstr ""

#: ipalib/plugins/group.py:453
msgid "Display information about a named group."
msgstr ""

#: ipalib/plugins/group.py:474
msgid "Add members to a group."
msgstr ""

#: ipalib/plugins/group.py:483 ipalib/plugins/group.py:540
#: ipalib/plugins/hbactest.py:386
msgid ""
"Cannot perform external member validation without Samba 4 support installed. "
"Make sure you have installed server-trust-ad sub-package of IPA on the server"
msgstr ""

#: ipalib/plugins/group.py:488 ipalib/plugins/group.py:545
#: ipalib/plugins/trust.py:561 ipalib/plugins/trust.py:1334
msgid ""
"Cannot perform join operation without own domain configured. Make sure you "
"have run ipa-adtrust-install on the IPA server first"
msgstr ""

#: ipalib/plugins/group.py:519
msgid "Remove members from a group."
msgstr ""

#: ipalib/plugins/group.py:576
msgid "Detach a managed group from a user."
msgstr ""

#: ipalib/plugins/group.py:579
#, python-format
msgid "Detached group \"%(value)s\" from user \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:600
msgid "not allowed to modify user entries"
msgstr ""

#: ipalib/plugins/group.py:606
msgid "not allowed to modify group entries"
msgstr ""

#: ipalib/plugins/group.py:625
msgid "Not a managed group"
msgstr ""

#: ipalib/plugins/hbacrule.py:26
msgid ""
"\n"
"Host-based access control\n"
"\n"
"Control who can access what services on what hosts. You\n"
"can use HBAC to control which users or groups can\n"
"access a service, or group of services, on a target host.\n"
"\n"
"You can also specify a category of users and target hosts.\n"
"This is currently limited to \"all\", but might be expanded in the\n"
"future.\n"
"\n"
"Target hosts in HBAC rules must be hosts managed by IPA.\n"
"\n"
"The available services and groups of services are controlled by the\n"
"hbacsvc and hbacsvcgroup plug-ins respectively.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a rule, \"test1\", that grants all users access to the host \"server"
"\" from\n"
" anywhere:\n"
"   ipa hbacrule-add --usercat=all test1\n"
"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
"\n"
" Display the properties of a named HBAC rule:\n"
"   ipa hbacrule-show test1\n"
"\n"
" Create a rule for a specific service. This lets the user john access\n"
" the sshd service on any machine from any machine:\n"
"   ipa hbacrule-add --hostcat=all john_sshd\n"
"   ipa hbacrule-add-user --users=john john_sshd\n"
"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
"\n"
" Create a rule for a new service group. This lets the user john access\n"
" the FTP service on any machine from any machine:\n"
"   ipa hbacsvcgroup-add ftpers\n"
"   ipa hbacsvc-add sftp\n"
"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
"   ipa hbacrule-add --hostcat=all john_ftp\n"
"   ipa hbacrule-add-user --users=john john_ftp\n"
"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
"\n"
" Disable a named HBAC rule:\n"
"   ipa hbacrule-disable test1\n"
"\n"
" Remove a named HBAC rule:\n"
"   ipa hbacrule-del allow_server\n"
msgstr ""

#: ipalib/plugins/hbacrule.py:91
msgid "Host-based access control commands"
msgstr ""

#: ipalib/plugins/hbacrule.py:95
msgid "The deny type has been deprecated."
msgstr ""

#: ipalib/plugins/hbacrule.py:118
msgid "HBAC rule"
msgstr ""

#: ipalib/plugins/hbacrule.py:119
msgid "HBAC rules"
msgstr ""

#: ipalib/plugins/hbacrule.py:188
msgid "HBAC Rules"
msgstr ""

#: ipalib/plugins/hbacrule.py:189 ipalib/plugins/selinuxusermap.py:210
msgid "HBAC Rule"
msgstr ""

#: ipalib/plugins/hbacrule.py:194 ipalib/plugins/selinuxusermap.py:201
#: ipalib/plugins/sudorule.py:218
msgid "Rule name"
msgstr ""

#: ipalib/plugins/hbacrule.py:199
msgid "Rule type (allow)"
msgstr ""

#: ipalib/plugins/hbacrule.py:200
msgid "Rule type"
msgstr ""

#: ipalib/plugins/hbacrule.py:210 ipalib/plugins/netgroup.py:196
#: ipalib/plugins/selinuxusermap.py:215 ipalib/plugins/sudorule.py:231
msgid "User category"
msgstr ""

#: ipalib/plugins/hbacrule.py:211 ipalib/plugins/netgroup.py:197
#: ipalib/plugins/selinuxusermap.py:216 ipalib/plugins/sudorule.py:232
msgid "User category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:216 ipalib/plugins/netgroup.py:202
#: ipalib/plugins/selinuxusermap.py:221 ipalib/plugins/sudorule.py:237
msgid "Host category"
msgstr ""

#: ipalib/plugins/hbacrule.py:217 ipalib/plugins/netgroup.py:203
#: ipalib/plugins/selinuxusermap.py:222 ipalib/plugins/sudorule.py:238
msgid "Host category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:223
msgid "Service category"
msgstr ""

#: ipalib/plugins/hbacrule.py:224
msgid "Service category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:236 ipalib/plugins/internal.py:695
#: ipalib/plugins/selinuxusermap.py:230 ipalib/plugins/sudorule.py:226
msgid "Enabled"
msgstr ""

#: ipalib/plugins/hbacrule.py:252 ipalib/plugins/hostgroup.py:129
#: ipalib/plugins/internal.py:506 ipalib/plugins/selinuxusermap.py:246
#: ipalib/plugins/sudorule.py:284
msgid "Host Groups"
msgstr ""

#: ipalib/plugins/hbacrule.py:258 ipalib/plugins/internal.py:454
#: ipalib/plugins/service.py:365
msgid "Services"
msgstr ""

#: ipalib/plugins/hbacrule.py:262
msgid "Service Groups"
msgstr ""

#: ipalib/plugins/hbacrule.py:272
msgid "Create a new HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:274
#, python-format
msgid "Added HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:286
msgid "Delete an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:288
#, python-format
msgid "Deleted HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:303
msgid "Modify an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:305
#, python-format
msgid "Modified HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:316 ipalib/plugins/netgroup.py:269
msgid "user category cannot be set to 'all' while there are allowed users"
msgstr ""

#: ipalib/plugins/hbacrule.py:318 ipalib/plugins/netgroup.py:271
msgid "host category cannot be set to 'all' while there are allowed hosts"
msgstr ""

#: ipalib/plugins/hbacrule.py:320
msgid ""
"service category cannot be set to 'all' while there are allowed services"
msgstr ""

#: ipalib/plugins/hbacrule.py:327
msgid "Search for HBAC rules."
msgstr ""

#: ipalib/plugins/hbacrule.py:330
#, python-format
msgid "%(count)d HBAC rule matched"
msgid_plural "%(count)d HBAC rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacrule.py:337
msgid "Display the properties of an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:343
msgid "Enable an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:345
#, python-format
msgid "Enabled HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:373
msgid "Disable an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:375
#, python-format
msgid "Disabled HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:409 ipalib/plugins/hbacrule.py:449
msgid "Access time"
msgstr ""

#: ipalib/plugins/hbacrule.py:484
msgid "Add users and groups to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:499 ipalib/plugins/selinuxusermap.py:509
#: ipalib/plugins/sudorule.py:590
msgid "users cannot be added when user category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:506
msgid "Remove users and groups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:515
msgid "Add target hosts and hostgroups to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:530 ipalib/plugins/selinuxusermap.py:542
#: ipalib/plugins/sudorule.py:644
msgid "hosts cannot be added when host category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:537
msgid "Remove target hosts and hostgroups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:570
msgid "Add services to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:585
msgid "services cannot be added when service category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:592
msgid "Remove service and service groups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacsvc.py:28
msgid ""
"\n"
"HBAC Services\n"
"\n"
"The PAM services that HBAC can control access to. The name used here\n"
"must match the service name that PAM is evaluating.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new HBAC service:\n"
"   ipa hbacsvc-add tftp\n"
"\n"
" Modify an existing HBAC service:\n"
"   ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n"
"\n"
" Search for HBAC services. This example will return two results, the FTP\n"
" service and the newly-added tftp service:\n"
"   ipa hbacsvc-find ftp\n"
"\n"
" Delete an HBAC service:\n"
"   ipa hbacsvc-del tftp\n"
"\n"
msgstr ""

#: ipalib/plugins/hbacsvc.py:53 ipalib/plugins/hbacsvcgroup.py:48
msgid "Host based access control commands"
msgstr ""

#: ipalib/plugins/hbacsvc.py:61 ipalib/plugins/hbacsvc.py:102
msgid "HBAC service"
msgstr ""

#: ipalib/plugins/hbacsvc.py:62
msgid "HBAC services"
msgstr ""

#: ipalib/plugins/hbacsvc.py:95
msgid "HBAC Services"
msgstr ""

#: ipalib/plugins/hbacsvc.py:96
msgid "HBAC Service"
msgstr ""

#: ipalib/plugins/hbacsvc.py:101
msgid "Service name"
msgstr ""

#: ipalib/plugins/hbacsvc.py:109
msgid "HBAC service description"
msgstr ""

#: ipalib/plugins/hbacsvc.py:117
msgid "Add a new HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:119
#, python-format
msgid "Added HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:125
msgid "Delete an existing HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:127
#, python-format
msgid "Deleted HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:133
msgid "Modify an HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:135
#, python-format
msgid "Modified HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:141
msgid "Search for HBAC services."
msgstr ""

#: ipalib/plugins/hbacsvc.py:144
#, python-format
msgid "%(count)d HBAC service matched"
msgid_plural "%(count)d HBAC services matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacsvc.py:151
msgid "Display information about an HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:25
msgid ""
"\n"
"HBAC Service Groups\n"
"\n"
"HBAC service groups can contain any number of individual services,\n"
"or \"members\". Every group must have a description.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new HBAC service group:\n"
"   ipa hbacsvcgroup-add --desc=\"login services\" login\n"
"\n"
" Add members to an HBAC service group:\n"
"   ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n"
"\n"
" Display information about a named group:\n"
"   ipa hbacsvcgroup-show login\n"
"\n"
" Delete an HBAC service group:\n"
"   ipa hbacsvcgroup-del login\n"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:56
msgid "HBAC service group"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:57
msgid "HBAC service groups"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:100
msgid "HBAC Service Groups"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:101
msgid "HBAC Service Group"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:106
msgid "Service group name"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:113
msgid "HBAC service group description"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:121
msgid "Add a new HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:123
#, python-format
msgid "Added HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:129
msgid "Delete an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:131
#, python-format
msgid "Deleted HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:137
msgid "Modify an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:139
#, python-format
msgid "Modified HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:145
msgid "Search for an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:148
#, python-format
msgid "%(count)d HBAC service group matched"
msgid_plural "%(count)d HBAC service groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacsvcgroup.py:155
msgid "Display information about an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:161
msgid "Add members to an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:167
msgid "Remove members from an HBAC service group."
msgstr ""

#: ipalib/plugins/hbactest.py:36
msgid ""
"\n"
"Simulate use of Host-based access controls\n"
"\n"
"HBAC rules control who can access what services on what hosts.\n"
"You can use HBAC to control which users or groups can access a service,\n"
"or group of services, on a target host.\n"
"\n"
"Since applying HBAC rules implies use of a production environment,\n"
"this plugin aims to provide simulation of HBAC rules evaluation without\n"
"having access to the production environment.\n"
"\n"
" Test user coming to a service on a named host against\n"
" existing enabled rules.\n"
"\n"
" ipa hbactest --user= --host= --service=\n"
"              [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n"
"              [--sizelimit= ]\n"
"\n"
" --user, --host, and --service are mandatory, others are optional.\n"
"\n"
" If --rules is specified simulate enabling of the specified rules and test\n"
" the login of the user using only these rules.\n"
"\n"
" If --enabled is specified, all enabled HBAC rules will be added to "
"simulation\n"
"\n"
" If --disabled is specified, all disabled HBAC rules will be added to "
"simulation\n"
"\n"
" If --nodetail is specified, do not return information about rules matched/"
"not matched.\n"
"\n"
" If both --rules and --enabled are specified, apply simulation to --rules "
"_and_\n"
" all IPA enabled rules.\n"
"\n"
" If no --rules specified, simulation is run against all IPA enabled rules.\n"
" By default there is a IPA-wide limit to number of entries fetched, you can "
"change it\n"
" with --sizelimit option.\n"
"\n"
"EXAMPLES:\n"
"\n"
"    1. Use all enabled HBAC rules in IPA database to simulate:\n"
"    $ ipa  hbactest --user=a1a --host=bar --service=sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Matched rules: allow_all\n"
"\n"
"    2. Disable detailed summary of how rules were applied:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"\n"
"    3. Test explicitly specified HBAC rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: myrule\n"
"\n"
"    4. Use all enabled HBAC rules in IPA database + explicitly specified "
"rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule --enabled\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Matched rules: allow_all\n"
"\n"
"    5. Test all disabled HBAC rules in IPA database:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: new-rule\n"
"\n"
"    6. Test all disabled HBAC rules in IPA database + explicitly specified "
"rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule --disabled\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"\n"
"    7. Test all (enabled and disabled) HBAC rules in IPA database:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --enabled --disabled\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Not matched rules: new-rule\n"
"      Matched rules: allow_all\n"
"\n"
"\n"
"HBACTEST AND TRUSTED DOMAINS\n"
"\n"
"When an external trusted domain is configured in IPA, HBAC rules are also "
"applied\n"
"on users accessing IPA resources from the trusted domain. Trusted domain "
"users and\n"
"groups (and their SIDs) can be then assigned to external groups which can "
"be\n"
"members of POSIX groups in IPA which can be used in HBAC rules and thus "
"allowing\n"
"access to resources protected by the HBAC system.\n"
"\n"
"hbactest plugin is capable of testing access for both local IPA users and "
"users\n"
"from the trusted domains, either by a fully qualified user name or by user "
"SID.\n"
"Such user names need to have a trusted domain specified as a short name\n"
"(DOMAIN\\Administrator) or with a user principal name (UPN), "
"Administrator@ad.test.\n"
"\n"
"Please note that hbactest executed with a trusted domain user as --user "
"parameter\n"
"can be only run by members of \"trust admins\" group.\n"
"\n"
"EXAMPLES:\n"
"\n"
"    1. Test if a user from a trusted domain specified by its shortname "
"matches any\n"
"       rule:\n"
"\n"
"    $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --"
"service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    2. Test if a user from a trusted domain specified by its domain name "
"matches\n"
"       any rule:\n"
"\n"
"    $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --"
"service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    3. Test if a user from a trusted domain specified by its SID matches any "
"rule:\n"
"\n"
"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
"            --host `hostname` --service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    4. Test if other user from a trusted domain specified by its SID matches "
"any rule:\n"
"\n"
"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n"
"            --host `hostname` --service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Not matched rules: can_login\n"
"\n"
"   5. Test if other user from a trusted domain specified by its shortname "
"matches\n"
"       any rule:\n"
"\n"
"    $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service "
"sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Not matched rules: can_login\n"
msgstr ""

#: ipalib/plugins/hbactest.py:245
msgid "Simulate use of Host-based access controls"
msgstr ""

#: ipalib/plugins/hbactest.py:249
msgid "Warning"
msgstr ""

#: ipalib/plugins/hbactest.py:250
msgid "Matched rules"
msgstr ""

#: ipalib/plugins/hbactest.py:251
msgid "Not matched rules"
msgstr ""

#: ipalib/plugins/hbactest.py:252
msgid "Non-existent or invalid rules"
msgstr ""

#: ipalib/plugins/hbactest.py:253
msgid "Result of simulation"
msgstr ""

#: ipalib/plugins/hbactest.py:259 ipalib/plugins/krbtpolicy.py:124
#: ipalib/plugins/passwd.py:74
msgid "User name"
msgstr ""

#: ipalib/plugins/hbactest.py:265
msgid "Target host"
msgstr ""

#: ipalib/plugins/hbactest.py:273
msgid "Rules to test. If not specified, --enabled is assumed"
msgstr ""

#: ipalib/plugins/hbactest.py:278
msgid "Hide details which rules are matched, not matched, or invalid"
msgstr ""

#: ipalib/plugins/hbactest.py:282
msgid "Include all enabled IPA rules into test [default]"
msgstr ""

#: ipalib/plugins/hbactest.py:286
msgid "Include all disabled IPA rules into test"
msgstr ""

#: ipalib/plugins/hbactest.py:290
msgid "Maximum number of rules to process when no --rules is specified"
msgstr ""

#: ipalib/plugins/hbactest.py:368
msgid "Unresolved rules in --rules"
msgstr ""

#: ipalib/plugins/hbactest.py:392 ipalib/plugins/trust.py:230
msgid ""
"Cannot search in trusted domains without own domain configured. Make sure "
"you have run ipa-adtrust-install on the IPA server first"
msgstr ""

#: ipalib/plugins/hbactest.py:478
#, python-format
msgid "Access granted: %s"
msgstr ""

#: ipalib/plugins/host.py:49
msgid ""
"\n"
"Hosts/Machines\n"
"\n"
"A host represents a machine. It can be used in a number of contexts:\n"
"- service entries are associated with a host\n"
"- a host stores the host/ service principal\n"
"- a host can be used in Host-based Access Control (HBAC) rules\n"
"- every enrolled client generates a host entry\n"
msgstr ""

#: ipalib/plugins/host.py:57
msgid ""
"\n"
"ENROLLMENT:\n"
"\n"
"There are three enrollment scenarios when enrolling a new client:\n"
"\n"
"1. You are enrolling as a full administrator. The host entry may exist\n"
"   or not. A full administrator is a member of the hostadmin role\n"
"   or the admins group.\n"
"2. You are enrolling as a limited administrator. The host must already\n"
"   exist. A limited administrator is a member a role with the\n"
"   Host Enrollment privilege.\n"
"3. The host has been created with a one-time password.\n"
msgstr ""

#: ipalib/plugins/host.py:69
msgid ""
"\n"
"RE-ENROLLMENT:\n"
"\n"
"Host that has been enrolled at some point, and lost its configuration (e.g. "
"VM\n"
"destroyed) can be re-enrolled.\n"
"\n"
"For more information, consult the manual pages for ipa-client-install.\n"
"\n"
"A host can optionally store information such as where it is located,\n"
"the OS that it runs, etc.\n"
msgstr ""

#: ipalib/plugins/host.py:81
msgid ""
"\n"
" Add a new host:\n"
"   ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example."
"com\n"
msgstr ""

#: ipalib/plugins/host.py:84
msgid ""
"\n"
" Delete a host:\n"
"   ipa host-del test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:87
msgid ""
"\n"
" Add a new host with a one-time password:\n"
"   ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:90
msgid ""
"\n"
" Add a new host with a random one-time password:\n"
"   ipa host-add --os='Fedora 12' --random test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:93
msgid ""
"\n"
" Modify information about a host:\n"
"   ipa host-mod --os='Fedora 12' test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:96
msgid ""
"\n"
" Remove SSH public keys of a host and update DNS to reflect this change:\n"
"   ipa host-mod --sshpubkey= --updatedns test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:99
msgid ""
"\n"
" Disable the host Kerberos key, SSL certificate and all of its services:\n"
"   ipa host-disable test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:102
msgid ""
"\n"
" Add a host that can manage this host's keytab and certificate:\n"
"   ipa host-add-managedby --hosts=test2 test\n"
msgstr ""

#: ipalib/plugins/host.py:160 ipalib/plugins/service.py:99
msgid "Keytab"
msgstr ""

#: ipalib/plugins/host.py:172 ipalib/plugins/internal.py:377
#: ipalib/plugins/service.py:108
msgid "Serial Number"
msgstr ""

#: ipalib/plugins/host.py:175 ipalib/plugins/internal.py:378
#: ipalib/plugins/service.py:111
msgid "Serial Number (hex)"
msgstr ""

#: ipalib/plugins/host.py:196
msgid "Failed managedby"
msgstr ""

#: ipalib/plugins/host.py:199 ipalib/plugins/user.py:95
msgid "SSH public key fingerprint"
msgstr ""

#: ipalib/plugins/host.py:224
#, python-format
msgid "invalid domain-name: %s"
msgstr ""

#: ipalib/plugins/host.py:235 ipalib/plugins/sudorule.py:424
msgid "host"
msgstr ""

#: ipalib/plugins/host.py:236 ipalib/plugins/sudorule.py:424
msgid "hosts"
msgstr ""

#: ipalib/plugins/host.py:374 ipalib/plugins/internal.py:505
#: ipalib/plugins/internal.py:563
msgid "Host"
msgstr ""

#: ipalib/plugins/host.py:379
msgid "Host name"
msgstr ""

#: ipalib/plugins/host.py:386
msgid "A description of this host"
msgstr ""

#: ipalib/plugins/host.py:390
msgid "Locality"
msgstr ""

#: ipalib/plugins/host.py:391
msgid "Host locality (e.g. \"Baltimore, MD\")"
msgstr ""

#: ipalib/plugins/host.py:396
msgid "Host location (e.g. \"Lab 2\")"
msgstr ""

#: ipalib/plugins/host.py:400
msgid "Platform"
msgstr ""

#: ipalib/plugins/host.py:401
msgid "Host hardware platform (e.g. \"Lenovo T61\")"
msgstr ""

#: ipalib/plugins/host.py:405
msgid "Operating system"
msgstr ""

#: ipalib/plugins/host.py:406
msgid "Host operating system and version (e.g. \"Fedora 9\")"
msgstr ""

#: ipalib/plugins/host.py:410
msgid "User password"
msgstr ""

#: ipalib/plugins/host.py:411
msgid "Password used in bulk enrollment"
msgstr ""

#: ipalib/plugins/host.py:414
msgid "Generate a random password to be used in bulk enrollment"
msgstr ""

#: ipalib/plugins/host.py:419 ipalib/plugins/user.py:509
msgid "Random password"
msgstr ""

#: ipalib/plugins/host.py:425 ipalib/plugins/service.py:379
msgid "Base-64 encoded server certificate"
msgstr ""

#: ipalib/plugins/host.py:428 ipalib/plugins/host.py:751
msgid "Principal name"
msgstr ""

#: ipalib/plugins/host.py:436
msgid "MAC address"
msgstr ""

#: ipalib/plugins/host.py:437
msgid "Hardware MAC address(es) on this host"
msgstr ""

#: ipalib/plugins/host.py:441 ipalib/plugins/user.py:571
msgid "SSH public key"
msgstr ""

#: ipalib/plugins/host.py:449
msgid ""
"Host category (semantics placed on this attribute are for local "
"interpretation)"
msgstr ""

#: ipalib/plugins/host.py:510
msgid "Add a new host."
msgstr ""

#: ipalib/plugins/host.py:513
#, python-format
msgid "Added host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:518
msgid "force host name even if not in DNS"
msgstr ""

#: ipalib/plugins/host.py:521
msgid "skip reverse DNS detection"
msgstr ""

#: ipalib/plugins/host.py:524
msgid "Add the host to DNS with this IP address"
msgstr ""

#: ipalib/plugins/host.py:609
#, python-format
msgid "The host was added but the DNS update failed with: %(exc)s"
msgstr ""

#: ipalib/plugins/host.py:630
msgid "Delete a host."
msgstr ""

#: ipalib/plugins/host.py:632
#, python-format
msgid "Deleted host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:637
msgid "Remove entries from DNS"
msgstr ""

#: ipalib/plugins/host.py:742
msgid "Modify information about a host."
msgstr ""

#: ipalib/plugins/host.py:745
#, python-format
msgid "Modified host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:752
msgid "Kerberos principal name for this host"
msgstr ""

#: ipalib/plugins/host.py:756
msgid "Update DNS entries"
msgstr ""

#: ipalib/plugins/host.py:769
msgid "Password cannot be set on enrolled host."
msgstr ""

#: ipalib/plugins/host.py:773
msgid "cn is immutable"
msgstr ""

#: ipalib/plugins/host.py:890
msgid "Search for hosts."
msgstr ""

#: ipalib/plugins/host.py:894
#, python-format
msgid "%(count)d host matched"
msgid_plural "%(count)d hosts matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/host.py:975
msgid "Display information about a host."
msgstr ""

#: ipalib/plugins/host.py:980 ipalib/plugins/service.py:608
msgid "file to store certificate in"
msgstr ""

#: ipalib/plugins/host.py:1012 ipalib/plugins/service.py:628
#, python-format
msgid "Certificate stored in file '%(file)s'"
msgstr ""

#: ipalib/plugins/host.py:1023
msgid "Disable the Kerberos key, SSL certificate and all services of a host."
msgstr ""

#: ipalib/plugins/host.py:1026
#, python-format
msgid "Disabled host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:1120
msgid "Add hosts that can manage this host."
msgstr ""

#: ipalib/plugins/host.py:1135 ipalib/plugins/otptoken.py:390
msgid "Remove hosts that can manage this host."
msgstr ""

#: ipalib/plugins/hostgroup.py:27
msgid ""
"\n"
"Groups of hosts.\n"
"\n"
"Manage groups of hosts. This is useful for applying access control to a\n"
"number of hosts by using Host-based Access Control.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new host group:\n"
"   ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n"
"\n"
" Add another new host group:\n"
"   ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n"
"\n"
" Add members to the hostgroup (using Bash brace expansion):\n"
"   ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n"
"\n"
" Add a hostgroup as a member of another hostgroup:\n"
"   ipa hostgroup-add-member --hostgroups=baltimore maryland\n"
"\n"
" Remove a host from the hostgroup:\n"
"   ipa hostgroup-remove-member --hosts=box2 baltimore\n"
"\n"
" Display a host group:\n"
"   ipa hostgroup-show baltimore\n"
"\n"
" Delete a hostgroup:\n"
"   ipa hostgroup-del baltimore\n"
msgstr ""

#: ipalib/plugins/hostgroup.py:65
msgid "host group"
msgstr ""

#: ipalib/plugins/hostgroup.py:66
msgid "host groups"
msgstr ""

#: ipalib/plugins/hostgroup.py:130
msgid "Host Group"
msgstr ""

#: ipalib/plugins/hostgroup.py:137
msgid "Host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:138
msgid "Name of host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:145
msgid "A description of this host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:172
msgid "Add a new hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:174
#, python-format
msgid "Added hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:190
#, python-format
msgid ""
"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
"common namespace"
msgstr ""

#: ipalib/plugins/hostgroup.py:213
msgid "Delete a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:215
#, python-format
msgid "Deleted hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:221
msgid "Modify a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:223
#, python-format
msgid "Modified hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:234
msgid "Search for hostgroups."
msgstr ""

#: ipalib/plugins/hostgroup.py:238
#, python-format
msgid "%(count)d hostgroup matched"
msgid_plural "%(count)d hostgroups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hostgroup.py:252
msgid "Display information about a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:263
msgid "Add members to a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:274
msgid "Remove members from a hostgroup."
msgstr ""

#: ipalib/plugins/idrange.py:34
msgid ""
"\n"
"ID ranges\n"
"\n"
"Manage ID ranges  used to map Posix IDs to SIDs and back.\n"
"\n"
"There are two type of ID ranges which are both handled by this utility:\n"
"\n"
" - the ID ranges of the local domain\n"
" - the ID ranges of trusted remote domains\n"
"\n"
"Both types have the following attributes in common:\n"
"\n"
" - base-id: the first ID of the Posix ID range\n"
" - range-size: the size of the range\n"
"\n"
"With those two attributes a range object can reserve the Posix IDs starting\n"
"with base-id up to but not including base-id+range-size exclusively.\n"
"\n"
"Additionally an ID range of the local domain may set\n"
" - rid-base: the first RID(*) of the corresponding RID range\n"
" - secondary-rid-base: first RID of the secondary RID range\n"
"\n"
"and an ID range of a trusted domain must set\n"
" - rid-base: the first RID of the corresponding RID range\n"
" - sid: domain SID of the trusted domain\n"
"\n"
"\n"
"\n"
"EXAMPLE: Add a new ID range for a trusted domain\n"
"\n"
"Since there might be more than one trusted domain the domain SID must be "
"given\n"
"while creating the ID range.\n"
"\n"
"  ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n"
"                  --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n"
"\n"
"This ID range is then used by the IPA server and the SSSD IPA provider to\n"
"assign Posix UIDs to users from the trusted domain.\n"
"\n"
"If e.g a range for a trusted domain is configured with the following "
"values:\n"
" base-id = 1200000\n"
" range-size = 200000\n"
" rid-base = 0\n"
"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. "
"So\n"
"RID 1000 <-> Posix ID 1201000\n"
"\n"
"\n"
"\n"
"EXAMPLE: Add a new ID range for the local domain\n"
"\n"
"To create an ID range for the local domain it is not necessary to specify a\n"
"domain SID. But since it is possible that a user and a group can have the "
"same\n"
"value as Posix ID a second RID interval is needed to handle conflicts.\n"
"\n"
"  ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n"
"                  --secondary-rid-base=1000000 local_range\n"
"\n"
"The data from the ID ranges of the local domain are used by the IPA server\n"
"internally to assign SIDs to IPA users and groups. The SID will then be "
"stored\n"
"in the user or group objects.\n"
"\n"
"If e.g. the ID range for the local domain is configured with the values "
"from\n"
"the example above then a new user with the UID 1200007 will get the RID "
"1007.\n"
"If this RID is already used by a group the RID will be 1000007. This can "
"only\n"
"happen if a user or a group object was created with a fixed ID because the\n"
"automatic assignment will not assign the same ID twice. Since there are "
"only\n"
"users and groups sharing the same ID namespace it is sufficient to have "
"only\n"
"one fallback range to handle conflicts.\n"
"\n"
"To find the Posix ID for a given RID from the local domain it has to be\n"
"checked first if the RID falls in the primary or secondary RID range and\n"
"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n"
"and the base-id has to be added to get the Posix ID.\n"
"\n"
"Typically the creation of ID ranges happens behind the scenes and this CLI\n"
"must not be used at all. The ID range for the local domain will be created\n"
"during installation or upgrade from an older version. The ID range for a\n"
"trusted domain will be created together with the trust by 'ipa trust-"
"add ...'.\n"
"\n"
"USE CASES:\n"
"\n"
"  Add an ID range from a transitively trusted domain\n"
"\n"
"    If the trusted domain (A) trusts another domain (B) as well and this "
"trust\n"
"    is transitive 'ipa trust-add domain-A' will only create a range for\n"
"    domain A.  The ID range for domain B must be added manually.\n"
"\n"
"  Add an additional ID range for the local domain\n"
"\n"
"    If the ID range of the local domain is exhausted, i.e. no new IDs can "
"be\n"
"    assigned to Posix users or groups by the DNA plugin, a new range has to "
"be\n"
"    created to allow new users and groups to be added. (Currently there is "
"no\n"
"    connection between this range CLI and the DNA plugin, but a future "
"version\n"
"    might be able to modify the configuration of the DNS plugin as well)\n"
"\n"
"In general it is not necessary to modify or delete ID ranges. If there is "
"no\n"
"other way to achieve a certain configuration than to modify or delete an ID\n"
"range it should be done with great care. Because UIDs are stored in the "
"file\n"
"system and are used for access control it might be possible that users are\n"
"allowed to access files of other users if an ID range got deleted and "
"reused\n"
"for a different domain.\n"
"\n"
"(*) The RID is typically the last integer of a user or group SID which "
"follows\n"
"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user "
"from\n"
"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of "
"the\n"
"user. RIDs are unique in a domain, 32bit values and are used for users and\n"
"groups.\n"
"\n"
"WARNING:\n"
"\n"
"DNA plugin in 389-ds will allocate IDs based on the ranges configured for "
"the\n"
"local domain. Currently the DNA plugin *cannot* be reconfigured itself "
"based\n"
"on the local ranges set via this family of commands.\n"
"\n"
"Manual configuration change has to be done in the DNA plugin configuration "
"for\n"
"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n"
"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to "
"be\n"
"modified to match the new range.\n"
msgstr ""

#: ipalib/plugins/idrange.py:185
msgid "ID Ranges"
msgstr ""

#: ipalib/plugins/idrange.py:186
msgid "ID Range"
msgstr ""

#: ipalib/plugins/idrange.py:189
msgid "local domain range"
msgstr ""

#: ipalib/plugins/idrange.py:190
msgid "Active Directory winsync range"
msgstr ""

#: ipalib/plugins/idrange.py:191 ipalib/plugins/trust.py:425
msgid "Active Directory domain range"
msgstr ""

#: ipalib/plugins/idrange.py:192 ipalib/plugins/trust.py:426
msgid "Active Directory trust range with POSIX attributes"
msgstr ""

#: ipalib/plugins/idrange.py:194
msgid "IPA trust range"
msgstr ""

#: ipalib/plugins/idrange.py:200
msgid "Range name"
msgstr ""

#: ipalib/plugins/idrange.py:205
msgid "First Posix ID of the range"
msgstr ""

#: ipalib/plugins/idrange.py:209
msgid "Number of IDs in the range"
msgstr ""

#: ipalib/plugins/idrange.py:213
msgid "First RID of the corresponding RID range"
msgstr ""

#: ipalib/plugins/idrange.py:217
msgid "First RID of the secondary RID range"
msgstr ""

#: ipalib/plugins/idrange.py:222
msgid "Domain SID of the trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:227
msgid "Name of the trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:230 ipalib/plugins/internal.py:538
#: ipalib/plugins/trust.py:459
msgid "Range type"
msgstr ""

#: ipalib/plugins/idrange.py:232
#, python-brace-format
msgid "ID range type, one of {vals}"
msgstr ""

#: ipalib/plugins/idrange.py:300
msgid ""
"range modification leaving objects with ID out of the defined range is not "
"allowed"
msgstr ""

#: ipalib/plugins/idrange.py:305
msgid ""
"Cannot perform SID validation without Samba 4 support installed. Make sure "
"you have installed server-trust-ad sub-package of IPA on the server"
msgstr ""

#: ipalib/plugins/idrange.py:312
msgid ""
"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-"
"install on the IPA server first"
msgstr ""

#: ipalib/plugins/idrange.py:324
msgid "SID is not recognized as a valid SID for a trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:361
msgid ""
"\n"
"    Add new ID range.\n"
"\n"
"    To add a new ID range you always have to specify\n"
"\n"
"        --base-id\n"
"        --range-size\n"
"\n"
"    Additionally\n"
"\n"
"        --rid-base\n"
"        --secondary-rid-base\n"
"\n"
"    may be given for a new ID range for the local domain while\n"
"\n"
"        --rid-base\n"
"        --dom-sid\n"
"\n"
"    must be given to add a new range for a trusted AD domain.\n"
"\n"
"    WARNING:\n"
"\n"
"    DNA plugin in 389-ds will allocate IDs based on the ranges configured "
"for the\n"
"    local domain. Currently the DNA plugin *cannot* be reconfigured itself "
"based\n"
"    on the local ranges set via this family of commands.\n"
"\n"
"    Manual configuration change has to be done in the DNA plugin "
"configuration for\n"
"    the new local range. Specifically, The dnaNextRange attribute of "
"'cn=Posix\n"
"    IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has "
"to be\n"
"    modified to match the new range.\n"
"    "
msgstr ""

#: ipalib/plugins/idrange.py:393
#, python-format
msgid "Added ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:466 ipalib/plugins/idrange.py:680
msgid "Options dom-sid and dom-name cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:476 ipalib/plugins/idrange.py:692
msgid ""
"SID for the specified trusted domain name could not be found. Please specify "
"the SID directly using dom-sid option."
msgstr ""

#: ipalib/plugins/idrange.py:491
msgid ""
"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of "
"the trusted domain is specified."
msgstr ""

#: ipalib/plugins/idrange.py:497
msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:502
msgid "Options dom-sid/dom-name and rid-base must be used together"
msgstr ""

#: ipalib/plugins/idrange.py:521
msgid ""
"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when "
"SID of the trusted domain is not specified."
msgstr ""

#: ipalib/plugins/idrange.py:528 ipalib/plugins/idrange.py:722
msgid "Options secondary-rid-base and rid-base must be used together"
msgstr ""

#: ipalib/plugins/idrange.py:538 ipalib/plugins/idrange.py:745
msgid "Primary RID range and secondary RID range cannot overlap"
msgstr ""

#: ipalib/plugins/idrange.py:550
msgid ""
"You must specify both rid-base and secondary-rid-base options, because ipa-"
"adtrust-install has already been run."
msgstr ""

#: ipalib/plugins/idrange.py:566
msgid "Delete an ID range."
msgstr ""

#: ipalib/plugins/idrange.py:568
#, python-format
msgid "Deleted ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:614
msgid "Search for ranges."
msgstr ""

#: ipalib/plugins/idrange.py:617
#, python-format
msgid "%(count)d range matched"
msgid_plural "%(count)d ranges matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/idrange.py:636
msgid "Display information about a range."
msgstr ""

#: ipalib/plugins/idrange.py:651
msgid "Modify ID range."
msgstr ""

#: ipalib/plugins/idrange.py:653
#, python-format
msgid "Modified ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:699
msgid "Options dom-sid and secondary-rid-base cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:704
msgid "Options dom-sid and rid-base must be used together"
msgstr ""

#: ipalib/plugins/internal.py:48 ipalib/plugins/internal.py:57
msgid "Name of object to export"
msgstr ""

#: ipalib/plugins/internal.py:51 ipalib/plugins/internal.py:60
msgid "Name of method to export"
msgstr ""

#: ipalib/plugins/internal.py:63
msgid "Name of command to export"
msgstr ""

#: ipalib/plugins/internal.py:68
msgid "Dict of JSON encoded IPA Objects"
msgstr ""

#: ipalib/plugins/internal.py:69
msgid "Dict of JSON encoded IPA Methods"
msgstr ""

#: ipalib/plugins/internal.py:70
msgid "Dict of JSON encoded IPA Commands"
msgstr ""

#: ipalib/plugins/internal.py:151
msgid "Your session has expired. Please re-login."
msgstr ""

#: ipalib/plugins/internal.py:155
msgid "Apply"
msgstr ""

#: ipalib/plugins/internal.py:156
msgid "Rebuild auto membership"
msgstr ""

#: ipalib/plugins/internal.py:157
msgid "Are you sure you want to rebuild auto membership?"
msgstr ""

#: ipalib/plugins/internal.py:159
msgid "Are you sure you want to proceed with the action?"
msgstr ""

#: ipalib/plugins/internal.py:160
#, python-brace-format
msgid "Are you sure you want to delete ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:161
#, python-brace-format
msgid "Are you sure you want to disable ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:162
#, python-brace-format
msgid "Are you sure you want to enable ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:163
msgid "Actions"
msgstr ""

#: ipalib/plugins/internal.py:167
#, python-brace-format
msgid "Add RunAs ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:168
#, python-brace-format
msgid "Add RunAs Groups into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:169
#, python-brace-format
msgid "Add ${other_entity} Managing ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:170
#, python-brace-format
msgid "Add ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:171
#, python-brace-format
msgid "Add Allow ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:172
#, python-brace-format
msgid "Add Deny ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:173
#, python-brace-format
msgid "Add ${entity} ${primary_key} into ${other_entity}"
msgstr ""

#: ipalib/plugins/internal.py:175
#, python-brace-format
msgid "${count} item(s) added"
msgstr ""

#: ipalib/plugins/internal.py:176
msgid "Direct Membership"
msgstr ""

#: ipalib/plugins/internal.py:177
#, python-brace-format
msgid "Filter available ${other_entity}"
msgstr ""

#: ipalib/plugins/internal.py:178
msgid "Indirect Membership"
msgstr ""

#: ipalib/plugins/internal.py:179
msgid "No entries."
msgstr ""

#: ipalib/plugins/internal.py:180
#, python-brace-format
msgid "Showing ${start} to ${end} of ${total} entries."
msgstr ""

#: ipalib/plugins/internal.py:182
#, python-brace-format
msgid "Remove RunAs ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:183
#, python-brace-format
msgid "Remove RunAs Groups from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:184
#, python-brace-format
msgid "Remove ${other_entity} Managing ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:185
#, python-brace-format
msgid "Remove ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:186
#, python-brace-format
msgid "Remove Allow ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:187
#, python-brace-format
msgid "Remove Deny ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:188
#, python-brace-format
msgid "Remove ${entity} ${primary_key} from ${other_entity}"
msgstr ""

#: ipalib/plugins/internal.py:190
#, python-brace-format
msgid "${count} item(s) removed"
msgstr ""

#: ipalib/plugins/internal.py:191
msgid "Show Results"
msgstr ""

#: ipalib/plugins/internal.py:194 ipalib/plugins/internal.py:242
msgid "About"
msgstr ""

#: ipalib/plugins/internal.py:195
msgid "Add"
msgstr ""

#: ipalib/plugins/internal.py:196
msgid "Add and Add Another"
msgstr ""

#: ipalib/plugins/internal.py:197
msgid "Add and Close"
msgstr ""

#: ipalib/plugins/internal.py:198
msgid "Add and Edit"
msgstr ""

#: ipalib/plugins/internal.py:199
msgid "Add Many"
msgstr ""

#: ipalib/plugins/internal.py:200
msgid "Back"
msgstr ""

#: ipalib/plugins/internal.py:201
msgid "Cancel"
msgstr ""

#: ipalib/plugins/internal.py:202
msgid "Close"
msgstr ""

#: ipalib/plugins/internal.py:203 ipalib/plugins/internal.py:692
msgid "Disable"
msgstr ""

#: ipalib/plugins/internal.py:204
msgid "Edit"
msgstr ""

#: ipalib/plugins/internal.py:205 ipalib/plugins/internal.py:694
msgid "Enable"
msgstr ""

#: ipalib/plugins/internal.py:207
msgid "Find"
msgstr ""

#: ipalib/plugins/internal.py:208
msgid "Get"
msgstr ""

#: ipalib/plugins/internal.py:209
msgid "Issue"
msgstr ""

#: ipalib/plugins/internal.py:210
msgid "OK"
msgstr ""

#: ipalib/plugins/internal.py:211
msgid "Refresh"
msgstr ""

#: ipalib/plugins/internal.py:212
msgid "Delete"
msgstr ""

#: ipalib/plugins/internal.py:213
msgid "Reset"
msgstr ""

#: ipalib/plugins/internal.py:214
msgid "Reset Password and Login"
msgstr ""

#: ipalib/plugins/internal.py:215
msgid "Restore"
msgstr ""

#: ipalib/plugins/internal.py:216
msgid "Retry"
msgstr ""

#: ipalib/plugins/internal.py:217
msgid "Revoke"
msgstr ""

#: ipalib/plugins/internal.py:218
msgid "Set"
msgstr ""

#: ipalib/plugins/internal.py:219
msgid "Update"
msgstr ""

#: ipalib/plugins/internal.py:220
msgid "View"
msgstr ""

#: ipalib/plugins/internal.py:223
msgid "Collapse All"
msgstr ""

#: ipalib/plugins/internal.py:224
msgid "Expand All"
msgstr ""

#: ipalib/plugins/internal.py:225
msgid "General"
msgstr ""

#: ipalib/plugins/internal.py:226
msgid "Identity Settings"
msgstr ""

#: ipalib/plugins/internal.py:227
#, python-brace-format
msgid "${entity} ${primary_key} Settings"
msgstr ""

#: ipalib/plugins/internal.py:228
msgid "Back to Top"
msgstr ""

#: ipalib/plugins/internal.py:229
#, python-brace-format
msgid "${entity} ${primary_key} updated"
msgstr ""

#: ipalib/plugins/internal.py:232
#, python-brace-format
msgid "${entity} successfully added"
msgstr ""

#: ipalib/plugins/internal.py:233
#, python-brace-format
msgid "Add ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:234
msgid "Available"
msgstr ""

#: ipalib/plugins/internal.py:235
msgid "Some operations failed."
msgstr ""

#: ipalib/plugins/internal.py:236
msgid "Operations Error"
msgstr ""

#: ipalib/plugins/internal.py:237
msgid "Confirmation"
msgstr ""

#: ipalib/plugins/internal.py:238
msgid "This page has unsaved changes. Please save or revert."
msgstr ""

#: ipalib/plugins/internal.py:239
msgid "Unsaved Changes"
msgstr ""

#: ipalib/plugins/internal.py:240
#, python-brace-format
msgid "Edit ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:241
msgid "Hide details"
msgstr ""

#: ipalib/plugins/internal.py:243
#, python-brace-format
msgid "${product}, version: ${version}"
msgstr ""

#: ipalib/plugins/internal.py:244
msgid "Prospective"
msgstr ""

#: ipalib/plugins/internal.py:245
msgid "Redirection"
msgstr ""

#: ipalib/plugins/internal.py:246
msgid "Select entries to be removed."
msgstr ""

#: ipalib/plugins/internal.py:247
#, python-brace-format
msgid "Remove ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:248
msgid "Show details"
msgstr ""

#: ipalib/plugins/internal.py:249
msgid "Validation error"
msgstr ""

#: ipalib/plugins/internal.py:250
msgid "Input form contains invalid or missing values."
msgstr ""

#: ipalib/plugins/internal.py:253
msgid "Please try the following options:"
msgstr ""

#: ipalib/plugins/internal.py:254
msgid "If the problem persists please contact the system administrator."
msgstr ""

#: ipalib/plugins/internal.py:255
msgid "Refresh the page."
msgstr ""

#: ipalib/plugins/internal.py:256
msgid "Reload the browser."
msgstr ""

#: ipalib/plugins/internal.py:257
msgid "Return to the main page and retry the operation"
msgstr ""

#: ipalib/plugins/internal.py:258
#, python-brace-format
msgid "An error has occurred (${error})"
msgstr ""

#: ipalib/plugins/internal.py:262
msgid "HTTP Error"
msgstr ""

#: ipalib/plugins/internal.py:263
msgid "Internal Error"
msgstr ""

#: ipalib/plugins/internal.py:264
msgid "IPA Error"
msgstr ""

#: ipalib/plugins/internal.py:265
msgid "No response"
msgstr ""

#: ipalib/plugins/internal.py:266
msgid "Unknown Error"
msgstr ""

#: ipalib/plugins/internal.py:267
msgid "URL"
msgstr ""

#: ipalib/plugins/internal.py:270
#, python-brace-format
msgid "${primary_key} is managed by:"
msgstr ""

#: ipalib/plugins/internal.py:271
#, python-brace-format
msgid "${primary_key} members:"
msgstr ""

#: ipalib/plugins/internal.py:272
#, python-brace-format
msgid "${primary_key} is a member of:"
msgstr ""

#: ipalib/plugins/internal.py:275
msgid "Settings"
msgstr ""

#: ipalib/plugins/internal.py:276 ipalib/plugins/internal.py:685
msgid "Search"
msgstr ""

#: ipalib/plugins/internal.py:278
msgid "False"
msgstr ""

#: ipalib/plugins/internal.py:280
msgid "Inherited from server configuration"
msgstr ""

#: ipalib/plugins/internal.py:281
msgid "MS-PAC"
msgstr ""

#: ipalib/plugins/internal.py:282
msgid "Override inherited settings"
msgstr ""

#: ipalib/plugins/internal.py:283
msgid "PAD"
msgstr ""

#: ipalib/plugins/internal.py:286
msgid ""
"To login with username and password, enter them in the fields below then "
"click Login."
msgstr ""

#: ipalib/plugins/internal.py:287
msgid "Logged In As"
msgstr ""

#: ipalib/plugins/internal.py:288
#, python-brace-format
msgid ""
"To login with Kerberos, please make sure you have valid tickets (obtainable "
"via kinit) and <a href='http://${host}/ipa/config/unauthorized."
"html'>configured</a> the browser correctly, then click Login."
msgstr ""

#: ipalib/plugins/internal.py:289
msgid "Login"
msgstr ""

#: ipalib/plugins/internal.py:290
msgid "Logout"
msgstr ""

#: ipalib/plugins/internal.py:291
msgid "Logout error"
msgstr ""

#: ipalib/plugins/internal.py:293
msgid "Sync OTP Token"
msgstr ""

#: ipalib/plugins/internal.py:294
msgid "Username"
msgstr ""

#: ipalib/plugins/internal.py:297
msgid "number of passwords"
msgstr ""

#: ipalib/plugins/internal.py:298
msgid "seconds"
msgstr ""

#: ipalib/plugins/internal.py:302 ipalib/plugins/internal.py:307
msgid "Attribute"
msgstr ""

#: ipalib/plugins/internal.py:305
#, python-brace-format
msgid "Add Condition into ${pkey}"
msgstr ""

#: ipalib/plugins/internal.py:306
msgid "Add Rule"
msgstr ""

#: ipalib/plugins/internal.py:308
msgid "Default host group"
msgstr ""

#: ipalib/plugins/internal.py:309
msgid "Default user group"
msgstr ""

#: ipalib/plugins/internal.py:310
msgid "Exclusive"
msgstr ""

#: ipalib/plugins/internal.py:311
msgid "Expression"
msgstr ""

#: ipalib/plugins/internal.py:312
msgid "Host group rule"
msgstr ""

#: ipalib/plugins/internal.py:313
msgid "Host group rules"
msgstr ""

#: ipalib/plugins/internal.py:314
msgid "Inclusive"
msgstr ""

#: ipalib/plugins/internal.py:315
msgid "User group rule"
msgstr ""

#: ipalib/plugins/internal.py:316
msgid "User group rules"
msgstr ""

#: ipalib/plugins/internal.py:321
msgid "Automount Location Settings"
msgstr ""

#: ipalib/plugins/internal.py:324
msgid "Map Type"
msgstr ""

#: ipalib/plugins/internal.py:325
msgid "Direct"
msgstr ""

#: ipalib/plugins/internal.py:326
msgid "Indirect"
msgstr ""

#: ipalib/plugins/internal.py:329
msgid "AA Compromise"
msgstr ""

#: ipalib/plugins/internal.py:330
msgid "Affiliation Changed"
msgstr ""

#: ipalib/plugins/internal.py:331
msgid "CA Compromise"
msgstr ""

#: ipalib/plugins/internal.py:333 ipalib/plugins/internal.py:704
msgid "Certificates"
msgstr ""

#: ipalib/plugins/internal.py:334
msgid "Certificate Hold"
msgstr ""

#: ipalib/plugins/internal.py:335
msgid "Cessation of Operation"
msgstr ""

#: ipalib/plugins/internal.py:336
msgid "Common Name"
msgstr ""

#: ipalib/plugins/internal.py:337
msgid "Expires On"
msgstr ""

#: ipalib/plugins/internal.py:338
msgid "Issued on from"
msgstr ""

#: ipalib/plugins/internal.py:339
msgid "Issued on to"
msgstr ""

#: ipalib/plugins/internal.py:340
msgid "Maximum serial number"
msgstr ""

#: ipalib/plugins/internal.py:341
msgid "Minimum serial number"
msgstr ""

#: ipalib/plugins/internal.py:343
msgid "Revoked on from"
msgstr ""

#: ipalib/plugins/internal.py:344
msgid "Revoked on to"
msgstr ""

#: ipalib/plugins/internal.py:346
msgid "Valid not after from"
msgstr ""

#: ipalib/plugins/internal.py:347
msgid "Valid not after to"
msgstr ""

#: ipalib/plugins/internal.py:348
msgid "Valid not before from"
msgstr ""

#: ipalib/plugins/internal.py:349
msgid "Valid not before to"
msgstr ""

#: ipalib/plugins/internal.py:350
msgid "Fingerprints"
msgstr ""

#: ipalib/plugins/internal.py:351
msgid "Get Certificate"
msgstr ""

#: ipalib/plugins/internal.py:352
#, python-brace-format
msgid "Issue New Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:353
msgid "Issued By"
msgstr ""

#: ipalib/plugins/internal.py:354
msgid "Issued On"
msgstr ""

#: ipalib/plugins/internal.py:355
msgid "Issued To"
msgstr ""

#: ipalib/plugins/internal.py:356
msgid "Key Compromise"
msgstr ""

#: ipalib/plugins/internal.py:357
msgid "MD5 Fingerprint"
msgstr ""

#: ipalib/plugins/internal.py:358
msgid "No Valid Certificate"
msgstr ""

#: ipalib/plugins/internal.py:359
msgid "New Certificate"
msgstr ""

#: ipalib/plugins/internal.py:360
msgid "Note"
msgstr ""

#: ipalib/plugins/internal.py:361
msgid "Organization"
msgstr ""

#: ipalib/plugins/internal.py:362
msgid "Organizational Unit"
msgstr ""

#: ipalib/plugins/internal.py:363
msgid "Privilege Withdrawn"
msgstr ""

#: ipalib/plugins/internal.py:364
msgid "Reason for Revocation"
msgstr ""

#: ipalib/plugins/internal.py:365
msgid "Remove from CRL"
msgstr ""

#: ipalib/plugins/internal.py:366
#, python-brace-format
msgid ""
"<ol> <li>Create a certificate database or use an existing one. To create a "
"new database:<br/> <code># certutil -N -d &lt;database path&gt;</code> </li> "
"<li>Create a CSR with subject <em>CN=&lt;hostname&gt;,O=&lt;realm&gt;</em>, "
"for example:<br/> <code># certutil -R -d &lt;database path&gt; -a -g &lt;key "
"size&gt; -s 'CN=${hostname},O=${realm}'</code> </li> <li> Copy and paste the "
"CSR (from <em>-----BEGIN NEW CERTIFICATE REQUEST-----</em> to <em>-----END "
"NEW CERTIFICATE REQUEST-----</em>) into the text area below: </li> </ol>"
msgstr ""

#: ipalib/plugins/internal.py:367
msgid "Certificate requested"
msgstr ""

#: ipalib/plugins/internal.py:368
#, python-brace-format
msgid "Restore Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:369
msgid "Restore Certificate"
msgstr ""

#: ipalib/plugins/internal.py:370
msgid ""
"To confirm your intention to restore this certificate, click the \"Restore\" "
"button."
msgstr ""

#: ipalib/plugins/internal.py:371
msgid "Certificate restored"
msgstr ""

#: ipalib/plugins/internal.py:373
#, python-brace-format
msgid "Revoke Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:374
msgid "Revoke Certificate"
msgstr ""

#: ipalib/plugins/internal.py:375
msgid ""
"To confirm your intention to revoke this certificate, select a reason from "
"the pull-down list, and click the \"Revoke\" button."
msgstr ""

#: ipalib/plugins/internal.py:376
msgid "Certificate Revoked"
msgstr ""

#: ipalib/plugins/internal.py:379
msgid "SHA1 Fingerprint"
msgstr ""

#: ipalib/plugins/internal.py:381
msgid "Superseded"
msgstr ""

#: ipalib/plugins/internal.py:382
msgid "Unspecified"
msgstr ""

#: ipalib/plugins/internal.py:383
msgid "Valid Certificate Present"
msgstr ""

#: ipalib/plugins/internal.py:384
msgid "Validity"
msgstr ""

#: ipalib/plugins/internal.py:385
#, python-brace-format
msgid "Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:386
msgid "View Certificate"
msgstr ""

#: ipalib/plugins/internal.py:389
msgid "Group Options"
msgstr ""

#: ipalib/plugins/internal.py:390
msgid "Search Options"
msgstr ""

#: ipalib/plugins/internal.py:391
msgid "SELinux Options"
msgstr ""

#: ipalib/plugins/internal.py:392
msgid "Service Options"
msgstr ""

#: ipalib/plugins/internal.py:393
msgid "User Options"
msgstr ""

#: ipalib/plugins/internal.py:398
msgid "Forward first"
msgstr ""

#: ipalib/plugins/internal.py:399
msgid "Forwarding disabled"
msgstr ""

#: ipalib/plugins/internal.py:400
msgid "Forward only"
msgstr ""

#: ipalib/plugins/internal.py:401 ipalib/plugins/internal.py:612
#: ipalib/plugins/internal.py:636
msgid "Options"
msgstr ""

#: ipalib/plugins/internal.py:404
msgid "Data"
msgstr ""

#: ipalib/plugins/internal.py:405
msgid "DNS record was deleted because it contained no data."
msgstr ""

#: ipalib/plugins/internal.py:406
msgid "Other Record Types"
msgstr ""

#: ipalib/plugins/internal.py:407
msgid "Address not valid, can't redirect"
msgstr ""

#: ipalib/plugins/internal.py:408
msgid "Create dns record"
msgstr ""

#: ipalib/plugins/internal.py:409
msgid "Creating record."
msgstr ""

#: ipalib/plugins/internal.py:410
msgid "Record creation failed."
msgstr ""

#: ipalib/plugins/internal.py:411
msgid "Checking if record exists."
msgstr ""

#: ipalib/plugins/internal.py:412
msgid "Record not found."
msgstr ""

#: ipalib/plugins/internal.py:413
msgid "Redirection to PTR record"
msgstr ""

#: ipalib/plugins/internal.py:414
#, python-brace-format
msgid "Zone found: ${zone}"
msgstr ""

#: ipalib/plugins/internal.py:415
msgid "Target reverse zone not found."
msgstr ""

#: ipalib/plugins/internal.py:416
msgid "Fetching DNS zones."
msgstr ""

#: ipalib/plugins/internal.py:417
msgid "An error occurred while fetching dns zones."
msgstr ""

#: ipalib/plugins/internal.py:418
msgid "You will be redirected to DNS Zone."
msgstr ""

#: ipalib/plugins/internal.py:419
msgid "Standard Record Types"
msgstr ""

#: ipalib/plugins/internal.py:420
msgid "Records for DNS Zone"
msgstr ""

#: ipalib/plugins/internal.py:421
msgid "Record Type"
msgstr ""

#: ipalib/plugins/internal.py:424
msgid "DNS Zone Settings"
msgstr ""

#: ipalib/plugins/internal.py:425
msgid "Add Permission"
msgstr ""

#: ipalib/plugins/internal.py:426
#, python-brace-format
msgid "Are you sure you want to add permission for DNS Zone ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:427
msgid "Remove Permission"
msgstr ""

#: ipalib/plugins/internal.py:428
#, python-brace-format
msgid "Are you sure you want to remove permission for DNS Zone ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:431
msgid "Group Settings"
msgstr ""

#: ipalib/plugins/internal.py:432 ipalib/plugins/internal.py:504
#: ipalib/plugins/internal.py:607
msgid "External"
msgstr ""

#: ipalib/plugins/internal.py:433
msgid "Change to external group"
msgstr ""

#: ipalib/plugins/internal.py:434
msgid "Change to POSIX group"
msgstr ""

#: ipalib/plugins/internal.py:435
msgid "Normal"
msgstr ""

#: ipalib/plugins/internal.py:436
msgid "POSIX"
msgstr ""

#: ipalib/plugins/internal.py:437
msgid "Group Type"
msgstr ""

#: ipalib/plugins/internal.py:440 ipalib/plugins/internal.py:502
#: ipalib/plugins/internal.py:561 ipalib/plugins/internal.py:603
msgid "Any Host"
msgstr ""

#: ipalib/plugins/internal.py:441
msgid "Any Service"
msgstr ""

#: ipalib/plugins/internal.py:442 ipalib/plugins/internal.py:503
#: ipalib/plugins/internal.py:562 ipalib/plugins/internal.py:604
msgid "Anyone"
msgstr ""

#: ipalib/plugins/internal.py:443
msgid "Accessing"
msgstr ""

#: ipalib/plugins/internal.py:444 ipalib/plugins/internal.py:609
msgid "Rule status"
msgstr ""

#: ipalib/plugins/internal.py:445
msgid "Via Service"
msgstr ""

#: ipalib/plugins/internal.py:446 ipalib/plugins/internal.py:509
#: ipalib/plugins/internal.py:564 ipalib/plugins/internal.py:616
msgid "Specified Hosts and Groups"
msgstr ""

#: ipalib/plugins/internal.py:447
msgid "Specified Services and Groups"
msgstr ""

#: ipalib/plugins/internal.py:448 ipalib/plugins/internal.py:510
#: ipalib/plugins/internal.py:565 ipalib/plugins/internal.py:617
msgid "Specified Users and Groups"
msgstr ""

#: ipalib/plugins/internal.py:449 ipalib/plugins/internal.py:618
msgid "Who"
msgstr ""

#: ipalib/plugins/internal.py:457
msgid "Access Denied"
msgstr ""

#: ipalib/plugins/internal.py:458
msgid "Access Granted"
msgstr ""

#: ipalib/plugins/internal.py:459
msgid "Include Disabled"
msgstr ""

#: ipalib/plugins/internal.py:460
msgid "Include Enabled"
msgstr ""

#: ipalib/plugins/internal.py:461
msgid "HBAC Test"
msgstr ""

#: ipalib/plugins/internal.py:462
msgid "Matched"
msgstr ""

#: ipalib/plugins/internal.py:463
msgid "Missing values: "
msgstr ""

#: ipalib/plugins/internal.py:464
msgid "New Test"
msgstr ""

#: ipalib/plugins/internal.py:465
msgid "Rules"
msgstr ""

#: ipalib/plugins/internal.py:466
msgid "Run Test"
msgstr ""

#: ipalib/plugins/internal.py:467
#, python-brace-format
msgid "Specify external ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:468
msgid "Unmatched"
msgstr ""

#: ipalib/plugins/internal.py:471
msgid "Host Certificate"
msgstr ""

#: ipalib/plugins/internal.py:472 ipalib/plugins/internal.py:572
msgid "Host Name"
msgstr ""

#: ipalib/plugins/internal.py:473 ipalib/plugins/internal.py:570
msgid "Delete Key, Unprovision"
msgstr ""

#: ipalib/plugins/internal.py:474
msgid "Host Settings"
msgstr ""

#: ipalib/plugins/internal.py:475
msgid "Enrolled"
msgstr ""

#: ipalib/plugins/internal.py:476
msgid "Enrollment"
msgstr ""

#: ipalib/plugins/internal.py:477
msgid "Fully Qualified Host Name"
msgstr ""

#: ipalib/plugins/internal.py:478
msgid "Kerberos Key"
msgstr ""

#: ipalib/plugins/internal.py:479 ipalib/plugins/internal.py:573
msgid "Kerberos Key Not Present"
msgstr ""

#: ipalib/plugins/internal.py:480
msgid "Kerberos Key Present, Host Provisioned"
msgstr ""

#: ipalib/plugins/internal.py:481 ipalib/plugins/internal.py:662
msgid "One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:482
msgid "One-Time-Password Not Present"
msgstr ""

#: ipalib/plugins/internal.py:483
msgid "One-Time-Password Present"
msgstr ""

#: ipalib/plugins/internal.py:484
msgid "Reset OTP"
msgstr ""

#: ipalib/plugins/internal.py:485
msgid "Reset One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:486
msgid "Set OTP"
msgstr ""

#: ipalib/plugins/internal.py:487
msgid "OTP set"
msgstr ""

#: ipalib/plugins/internal.py:488
msgid "Set One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:490 ipalib/plugins/internal.py:577
msgid "Unprovision"
msgstr ""

#: ipalib/plugins/internal.py:491
msgid "Are you sure you want to unprovision this host?"
msgstr ""

#: ipalib/plugins/internal.py:492 ipalib/plugins/internal.py:579
#, python-brace-format
msgid "Unprovisioning ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:493
msgid "Host unprovisioned"
msgstr ""

#: ipalib/plugins/internal.py:496
msgid "Host Group Settings"
msgstr ""

#: ipalib/plugins/internal.py:499 ipalib/plugins/krbtpolicy.py:118
#: ipalib/plugins/krbtpolicy.py:119
msgid "Kerberos Ticket Policy"
msgstr ""

#: ipalib/plugins/internal.py:508
msgid "Netgroup Settings"
msgstr ""

#: ipalib/plugins/internal.py:511 ipalib/plugins/internal.py:566
#: ipalib/plugins/pwpolicy.py:519 ipalib/plugins/user.py:430
msgid "User"
msgstr ""

#: ipalib/plugins/internal.py:521
msgid "Permission settings"
msgstr ""

#: ipalib/plugins/internal.py:522
msgid "Attribute breakdown"
msgstr ""

#: ipalib/plugins/internal.py:526
msgid "Privilege Settings"
msgstr ""

#: ipalib/plugins/internal.py:529 ipalib/plugins/pwpolicy.py:303
msgid "Password Policy"
msgstr ""

#: ipalib/plugins/internal.py:532
msgid "Range Settings"
msgstr ""

#: ipalib/plugins/internal.py:533
msgid "Base ID"
msgstr ""

#: ipalib/plugins/internal.py:534
msgid "Primary RID base"
msgstr ""

#: ipalib/plugins/internal.py:535
msgid "Range size"
msgstr ""

#: ipalib/plugins/internal.py:536
msgid "Domain SID"
msgstr ""

#: ipalib/plugins/internal.py:537
msgid "Secondary RID base"
msgstr ""

#: ipalib/plugins/internal.py:539 ipalib/plugins/trust.py:145
msgid "Active Directory domain"
msgstr ""

#: ipalib/plugins/internal.py:540
msgid "Active Directory domain with POSIX attributes"
msgstr ""

#: ipalib/plugins/internal.py:541
msgid "Detect"
msgstr ""

#: ipalib/plugins/internal.py:542
msgid "Local domain"
msgstr ""

#: ipalib/plugins/internal.py:543
msgid "IPA trust"
msgstr ""

#: ipalib/plugins/internal.py:544
msgid "Active Directory winsync"
msgstr ""

#: ipalib/plugins/internal.py:547
msgid "RADIUS Proxy Server Settings"
msgstr ""

#: ipalib/plugins/internal.py:550 ipalib/plugins/realmdomains.py:92
#: ipalib/plugins/realmdomains.py:93
msgid "Realm Domains"
msgstr ""

#: ipalib/plugins/internal.py:551
msgid "Check DNS"
msgstr ""

#: ipalib/plugins/internal.py:552
msgid "Do you also want to perform DNS check?"
msgstr ""

#: ipalib/plugins/internal.py:553
msgid "Force Update"
msgstr ""

#: ipalib/plugins/internal.py:556
msgid "Role Settings"
msgstr ""

#: ipalib/plugins/internal.py:569
msgid "Service Certificate"
msgstr ""

#: ipalib/plugins/internal.py:571
msgid "Service Settings"
msgstr ""

#: ipalib/plugins/internal.py:574
msgid "Provisioning"
msgstr ""

#: ipalib/plugins/internal.py:578
msgid "Are you sure you want to unprovision this service?"
msgstr ""

#: ipalib/plugins/internal.py:580
msgid "Service unprovisioned"
msgstr ""

#: ipalib/plugins/internal.py:581
msgid "Kerberos Key Present, Service Provisioned"
msgstr ""

#: ipalib/plugins/internal.py:584
msgid "SSH public keys"
msgstr ""

#: ipalib/plugins/internal.py:585
msgid "SSH public key:"
msgstr ""

#: ipalib/plugins/internal.py:586
msgid "Set SSH key"
msgstr ""

#: ipalib/plugins/internal.py:587
msgid "Show/Set key"
msgstr ""

#: ipalib/plugins/internal.py:588
msgid "Modified: key not set"
msgstr ""

#: ipalib/plugins/internal.py:589
msgid "Modified"
msgstr ""

#: ipalib/plugins/internal.py:590
msgid "New: key not set"
msgstr ""

#: ipalib/plugins/internal.py:591
msgid "New: key set"
msgstr ""

#: ipalib/plugins/internal.py:594
msgid "Groups"
msgstr ""

#: ipalib/plugins/internal.py:597 ipalib/plugins/sudocmdgroup.py:126
msgid "Commands"
msgstr ""

#: ipalib/plugins/internal.py:600
msgid "Allow"
msgstr ""

#: ipalib/plugins/internal.py:601
msgid "Any Command"
msgstr ""

#: ipalib/plugins/internal.py:602
msgid "Any Group"
msgstr ""

#: ipalib/plugins/internal.py:605
msgid "Run Commands"
msgstr ""

#: ipalib/plugins/internal.py:606
msgid "Deny"
msgstr ""

#: ipalib/plugins/internal.py:608
msgid "Access this host"
msgstr ""

#: ipalib/plugins/internal.py:610
msgid "Option added"
msgstr ""

#: ipalib/plugins/internal.py:611
#, python-brace-format
msgid "${count} option(s) removed"
msgstr ""

#: ipalib/plugins/internal.py:613
msgid "As Whom"
msgstr ""

#: ipalib/plugins/internal.py:614
msgid "Specified Commands and Groups"
msgstr ""

#: ipalib/plugins/internal.py:615
msgid "Specified Groups"
msgstr ""

#: ipalib/plugins/internal.py:621
msgid "Account"
msgstr ""

#: ipalib/plugins/internal.py:622
msgid "Administrative account"
msgstr ""

#: ipalib/plugins/internal.py:623
msgid "SID blacklists"
msgstr ""

#: ipalib/plugins/internal.py:624
msgid "Trust Settings"
msgstr ""

#: ipalib/plugins/internal.py:625 ipalib/plugins/realmdomains.py:100
#: ipalib/plugins/trust.py:850
msgid "Domain"
msgstr ""

#: ipalib/plugins/internal.py:626
msgid "Establish using"
msgstr ""

#: ipalib/plugins/internal.py:627
msgid "Fetch domains"
msgstr ""

#: ipalib/plugins/internal.py:628 ipalib/plugins/trust.py:357
#: ipalib/plugins/trust.py:1167
msgid "Domain NetBIOS name"
msgstr ""

#: ipalib/plugins/internal.py:629 ipalib/plugins/trust.py:361
#: ipalib/plugins/trust.py:1171
msgid "Domain Security Identifier"
msgstr ""

#: ipalib/plugins/internal.py:630
msgid "Pre-shared password"
msgstr ""

#: ipalib/plugins/internal.py:631 ipalib/plugins/trust.py:137
msgid "Trust direction"
msgstr ""

#: ipalib/plugins/internal.py:632 ipalib/plugins/trust.py:141
msgid "Trust status"
msgstr ""

#: ipalib/plugins/internal.py:633 ipalib/plugins/trust.py:139
msgid "Trust type"
msgstr ""

#: ipalib/plugins/internal.py:639
msgid "Account Settings"
msgstr ""

#: ipalib/plugins/internal.py:640
msgid "Account Status"
msgstr ""

#: ipalib/plugins/internal.py:641
msgid "Contact Settings"
msgstr ""

#: ipalib/plugins/internal.py:642
msgid "Employee Information"
msgstr ""

#: ipalib/plugins/internal.py:643
msgid "Error changing account status"
msgstr ""

#: ipalib/plugins/internal.py:644
msgid "Password expiration"
msgstr ""

#: ipalib/plugins/internal.py:645
msgid "Mailing Address"
msgstr ""

#: ipalib/plugins/internal.py:646
msgid "Misc. Information"
msgstr ""

#: ipalib/plugins/internal.py:647
#, python-brace-format
msgid ""
"Are you sure you want to ${action} the user?<br/>The change will take effect "
"immediately."
msgstr ""

#: ipalib/plugins/internal.py:648
#, python-brace-format
msgid "Click to ${action}"
msgstr ""

#: ipalib/plugins/internal.py:649
msgid "Unlock"
msgstr ""

#: ipalib/plugins/internal.py:650
#, python-brace-format
msgid "Are you sure you want to unlock user ${object}?"
msgstr ""

#: ipalib/plugins/internal.py:654 ipalib/plugins/passwd.py:84
msgid "Current Password"
msgstr ""

#: ipalib/plugins/internal.py:655
msgid "Current password is required"
msgstr ""

#: ipalib/plugins/internal.py:656
#, python-brace-format
msgid "Your password expires in ${days} days."
msgstr ""

#: ipalib/plugins/internal.py:657
msgid "First OTP"
msgstr ""

#: ipalib/plugins/internal.py:658
msgid "The password or username you entered is incorrect."
msgstr ""

#: ipalib/plugins/internal.py:659 ipalib/plugins/passwd.py:81
msgid "New Password"
msgstr ""

#: ipalib/plugins/internal.py:660
msgid "New password is required"
msgstr ""

#: ipalib/plugins/internal.py:661 ipalib/plugins/passwd.py:94
msgid "OTP"
msgstr ""

#: ipalib/plugins/internal.py:663
msgid "Token synchronization failed"
msgstr ""

#: ipalib/plugins/internal.py:664
msgid "The username, password or token codes are not correct"
msgstr ""

#: ipalib/plugins/internal.py:665
msgid "Token was synchronized"
msgstr ""

#: ipalib/plugins/internal.py:667
msgid "Password or Password+One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:668
msgid "Password change complete"
msgstr ""

#: ipalib/plugins/internal.py:669
msgid "Passwords must match"
msgstr ""

#: ipalib/plugins/internal.py:670
msgid "Password reset was not successful."
msgstr ""

#: ipalib/plugins/internal.py:671
msgid "Reset Password"
msgstr ""

#: ipalib/plugins/internal.py:672
msgid "Reset your password."
msgstr ""

#: ipalib/plugins/internal.py:673
msgid "Second OTP"
msgstr ""

#: ipalib/plugins/internal.py:674 ipalib/plugins/otptoken.py:448
msgid "Token ID"
msgstr ""

#: ipalib/plugins/internal.py:675
msgid "Verify Password"
msgstr ""

#: ipalib/plugins/internal.py:678
msgid "Are you sure you want to delete selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:679
#, python-brace-format
msgid "${count} item(s) deleted"
msgstr ""

#: ipalib/plugins/internal.py:680
msgid "Are you sure you want to disable selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:681
#, python-brace-format
msgid "${count} item(s) disabled"
msgstr ""

#: ipalib/plugins/internal.py:682
msgid "Are you sure you want to enable selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:683
#, python-brace-format
msgid "${count} item(s) enabled"
msgstr ""

#: ipalib/plugins/internal.py:684
msgid "Some entries were not deleted"
msgstr ""

#: ipalib/plugins/internal.py:686
msgid "Quick Links"
msgstr ""

#: ipalib/plugins/internal.py:687
msgid "Select All"
msgstr ""

#: ipalib/plugins/internal.py:688
#, python-brace-format
msgid ""
"Query returned more results than the configured size limit. Displaying the "
"first ${counter} results."
msgstr ""

#: ipalib/plugins/internal.py:689
msgid "Unselect All"
msgstr ""

#: ipalib/plugins/internal.py:693
msgid "Disabled"
msgstr ""

#: ipalib/plugins/internal.py:697
msgid "Working"
msgstr ""

#: ipalib/plugins/internal.py:700
msgid "Audit"
msgstr ""

#: ipalib/plugins/internal.py:701
msgid "Authentication"
msgstr ""

#: ipalib/plugins/internal.py:703
msgid "Automount"
msgstr ""

#: ipalib/plugins/internal.py:705
msgid "DNS"
msgstr ""

#: ipalib/plugins/internal.py:706
msgid "Host Based Access Control"
msgstr ""

#: ipalib/plugins/internal.py:707
msgid "Identity"
msgstr ""

#: ipalib/plugins/internal.py:708
msgid "IPA Server"
msgstr ""

#: ipalib/plugins/internal.py:709
msgid "Network Services"
msgstr ""

#: ipalib/plugins/internal.py:710
msgid "Policy"
msgstr ""

#: ipalib/plugins/internal.py:711
msgid "Role Based Access Control"
msgstr ""

#: ipalib/plugins/internal.py:712
msgid "Sudo"
msgstr ""

#: ipalib/plugins/internal.py:713 ipalib/plugins/trust.py:346
msgid "Trusts"
msgstr ""

#: ipalib/plugins/internal.py:715
msgid "True"
msgstr ""

#: ipalib/plugins/internal.py:717
msgid "First"
msgstr ""

#: ipalib/plugins/internal.py:718
msgid "Last"
msgstr ""

#: ipalib/plugins/internal.py:719
msgid "Next"
msgstr ""

#: ipalib/plugins/internal.py:720
msgid "Page"
msgstr ""

#: ipalib/plugins/internal.py:721
msgid "Prev"
msgstr ""

#: ipalib/plugins/internal.py:722
msgid "undo"
msgstr ""

#: ipalib/plugins/internal.py:723
msgid "undo all"
msgstr ""

#: ipalib/plugins/internal.py:725
msgid "Text does not match field pattern"
msgstr ""

#: ipalib/plugins/internal.py:726
msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")"
msgstr ""

#: ipalib/plugins/internal.py:727
msgid "Must be a decimal number"
msgstr ""

#: ipalib/plugins/internal.py:728
msgid "Format error"
msgstr ""

#: ipalib/plugins/internal.py:729
msgid "Must be an integer"
msgstr ""

#: ipalib/plugins/internal.py:730
msgid "Not a valid IP address"
msgstr ""

#: ipalib/plugins/internal.py:731
msgid "Not a valid IPv4 address"
msgstr ""

#: ipalib/plugins/internal.py:732
msgid "Not a valid IPv6 address"
msgstr ""

#: ipalib/plugins/internal.py:733
#, python-brace-format
msgid "Maximum value is ${value}"
msgstr ""

#: ipalib/plugins/internal.py:734
#, python-brace-format
msgid "Minimum value is ${value}"
msgstr ""

#: ipalib/plugins/internal.py:735
msgid "Not a valid network address"
msgstr ""

#: ipalib/plugins/internal.py:736
msgid "Parse error"
msgstr ""

#: ipalib/plugins/internal.py:737
#, python-brace-format
msgid "'${port}' is not a valid port"
msgstr ""

#: ipalib/plugins/internal.py:738
msgid "Required field"
msgstr ""

#: ipalib/plugins/internal.py:739
msgid "Unsupported value"
msgstr ""

#: ipalib/plugins/internal.py:744
msgid "Dict of I18N messages"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:27
msgid ""
"\n"
"Kerberos ticket policy\n"
"\n"
"There is a single Kerberos ticket policy. This policy defines the\n"
"maximum ticket lifetime and the maximum renewal age, the period during\n"
"which the ticket is renewable.\n"
"\n"
"You can also create a per-user ticket policy by specifying the user login.\n"
"\n"
"For changes to the global policy to take effect, restarting the KDC service\n"
"is required, which can be achieved using:\n"
"\n"
"service krb5kdc restart\n"
"\n"
"Changes to per-user policies take effect immediately for newly requested\n"
"tickets (e.g. when the user next runs kinit).\n"
"\n"
"EXAMPLES:\n"
"\n"
" Display the current Kerberos ticket policy:\n"
"  ipa krbtpolicy-show\n"
"\n"
" Reset the policy to the default:\n"
"  ipa krbtpolicy-reset\n"
"\n"
" Modify the policy to 8 hours max life, 1-day max renewal:\n"
"  ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n"
"\n"
" Display effective Kerberos ticket policy for user 'admin':\n"
"  ipa krbtpolicy-show admin\n"
"\n"
" Reset per-user policy for user 'admin':\n"
"  ipa krbtpolicy-reset admin\n"
"\n"
" Modify per-user policy for user 'admin':\n"
"  ipa krbtpolicy-mod admin --maxlife=3600\n"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:80
msgid "kerberos ticket policy settings"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:125
msgid "Manage ticket policy for specific user"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:130
msgid "Max life"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:131
msgid "Maximum ticket life (seconds)"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:136
msgid "Max renew"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:137
msgid "Maximum renewable age (seconds)"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:150
msgid "Modify Kerberos ticket policy."
msgstr ""

#: ipalib/plugins/krbtpolicy.py:163
msgid "Display the current Kerberos ticket policy."
msgstr ""

#: ipalib/plugins/krbtpolicy.py:186
#, python-format
msgid "Ticket policy for %s could not be read"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:199
msgid "Default ticket policy could not be read"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:205
msgid "Reset Kerberos ticket policy to the default values."
msgstr ""

#: ipalib/plugins/migration.py:38
msgid ""
"\n"
"Migration to IPA\n"
"\n"
"Migrate users and groups from an LDAP server to IPA.\n"
"\n"
"This performs an LDAP query against the remote server searching for\n"
"users and groups in a container. In order to migrate passwords you need\n"
"to bind as a user that can read the userPassword attribute on the remote\n"
"server. This is generally restricted to high-level admins such as\n"
"cn=Directory Manager in 389-ds (this is the default bind user).\n"
"\n"
"The default user container is ou=People.\n"
"\n"
"The default group container is ou=Groups.\n"
"\n"
"Users and groups that already exist on the IPA server are skipped.\n"
"\n"
"Two LDAP schemas define how group members are stored: RFC2307 and\n"
"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n"
"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n"
"\n"
"The schema compat feature allows IPA to reformat data for systems that\n"
"do not support RFC2307bis. It is recommended that this feature is disabled\n"
"during migration to reduce system overhead. It can be re-enabled after\n"
"migration. To migrate with it enabled use the \"--with-compat\" option.\n"
"\n"
"Migrated users do not have Kerberos credentials, they have only their\n"
"LDAP password. To complete the migration process, users need to go\n"
"to http://ipa.example.com/ipa/migration and authenticate using their\n"
"LDAP password in order to generate their Kerberos credentials.\n"
"\n"
"Migration is disabled by default. Use the command ipa config-mod to\n"
"enable it:\n"
"\n"
" ipa config-mod --enable-migration=TRUE\n"
"\n"
"If a base DN is not provided with --basedn then IPA will use either\n"
"the value of defaultNamingContext if it is set or the first value\n"
"in namingContexts set in the root of the remote LDAP server.\n"
"\n"
"Users are added as members to the default user group. This can be a\n"
"time-intensive task so during migration this is done in a batch\n"
"mode for every 100 users. As a result there will be a window in which\n"
"users will be added to IPA but will not be members of the default\n"
"user group.\n"
"\n"
"EXAMPLES:\n"
"\n"
" The simplest migration, accepting all defaults:\n"
"   ipa migrate-ds ldap://ds.example.com:389\n"
"\n"
" Specify the user and group container. This can be used to migrate user\n"
" and group data from an IPA v1 server:\n"
"   ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n"
"       --group-container='cn=groups,cn=accounts' \\\n"
"       ldap://ds.example.com:389\n"
"\n"
" Since IPA v2 server already contain predefined groups that may collide "
"with\n"
" groups in migrated (IPA v1) server (for example admins, ipausers), users\n"
" having colliding group as their primary group may happen to belong to\n"
" an unknown group on new IPA v2 server.\n"
" Use --group-overwrite-gid option to overwrite GID of already existing "
"groups\n"
" to prevent this issue:\n"
"    ipa migrate-ds --group-overwrite-gid \\\n"
"        --user-container='cn=users,cn=accounts' \\\n"
"        --group-container='cn=groups,cn=accounts' \\\n"
"        ldap://ds.example.com:389\n"
"\n"
" Migrated users or groups may have object class and accompanied attributes\n"
" unknown to the IPA v2 server. These object classes and attributes may be\n"
" left out of the migration process:\n"
"    ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n"
"       --group-container='cn=groups,cn=accounts' \\\n"
"       --user-ignore-objectclass=radiusprofile \\\n"
"       --user-ignore-attribute=radiusgroupname \\\n"
"       ldap://ds.example.com:389\n"
"\n"
"LOGGING\n"
"\n"
"Migration will log warnings and errors to the Apache error log. This\n"
"file should be evaluated post-migration to correct or investigate any\n"
"issues that were discovered.\n"
"\n"
"For every 100 users migrated an info-level message will be displayed to\n"
"give the current progress and duration to make it possible to track\n"
"the progress of migration.\n"
"\n"
"If the log level is debug, either by setting debug = True in\n"
"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be "
"printed\n"
"for each user added plus a summary when the default user group is\n"
"updated.\n"
msgstr ""

#: ipalib/plugins/migration.py:135
#, python-format
msgid ""
"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually."
msgstr ""

#: ipalib/plugins/migration.py:136
#, python-format
msgid ""
"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-"
"mod' to set it manually."
msgstr ""

#: ipalib/plugins/migration.py:137
msgid ""
"Failed to add user to the default group. Use 'ipa group-add-member' to add "
"manually."
msgstr ""

#: ipalib/plugins/migration.py:138
msgid "Migration of LDAP search reference is not supported."
msgstr ""

#: ipalib/plugins/migration.py:139
msgid "Malformed DN"
msgstr ""

#: ipalib/plugins/migration.py:156
#, python-format
msgid "%(user)s is not a POSIX user"
msgstr ""

#: ipalib/plugins/migration.py:429
msgid ""
". Check GID of the existing group. Use --group-overwrite-gid option to "
"overwrite the GID"
msgstr ""

#: ipalib/plugins/migration.py:444
msgid "Invalid LDAP URI."
msgstr ""

#: ipalib/plugins/migration.py:450
msgid "Migrate users and groups from DS to IPA."
msgstr ""

#: ipalib/plugins/migration.py:497
msgid "LDAP URI"
msgstr ""

#: ipalib/plugins/migration.py:498
msgid "LDAP URI of DS server to migrate from"
msgstr ""

#: ipalib/plugins/migration.py:504
msgid "bind password"
msgstr ""

#: ipalib/plugins/migration.py:511
msgid "Bind DN"
msgstr ""

#: ipalib/plugins/migration.py:517
msgid "User container"
msgstr ""

#: ipalib/plugins/migration.py:518
msgid "DN of container for users in DS relative to base DN"
msgstr ""

#: ipalib/plugins/migration.py:524
msgid "Group container"
msgstr ""

#: ipalib/plugins/migration.py:525
msgid "DN of container for groups in DS relative to base DN"
msgstr ""

#: ipalib/plugins/migration.py:531
msgid "User object class"
msgstr ""

#: ipalib/plugins/migration.py:532
msgid "Objectclasses used to search for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:539
msgid "Group object class"
msgstr ""

#: ipalib/plugins/migration.py:540
msgid "Objectclasses used to search for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:547
msgid "Ignore user object class"
msgstr ""

#: ipalib/plugins/migration.py:548
msgid "Objectclasses to be ignored for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:555
msgid "Ignore user attribute"
msgstr ""

#: ipalib/plugins/migration.py:556
msgid "Attributes to be ignored for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:563
msgid "Ignore group object class"
msgstr ""

#: ipalib/plugins/migration.py:564
msgid "Objectclasses to be ignored for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:571
msgid "Ignore group attribute"
msgstr ""

#: ipalib/plugins/migration.py:572
msgid "Attributes to be ignored for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:579
msgid "Overwrite GID"
msgstr ""

#: ipalib/plugins/migration.py:580
msgid ""
"When migrating a group already existing in IPA domain overwrite the group "
"GID and report as success"
msgstr ""

#: ipalib/plugins/migration.py:585
msgid "LDAP schema"
msgstr ""

#: ipalib/plugins/migration.py:586
msgid ""
"The schema used on the LDAP server. Supported values are RFC2307 and "
"RFC2307bis. The default is RFC2307bis"
msgstr ""

#: ipalib/plugins/migration.py:592
msgid "Continue"
msgstr ""

#: ipalib/plugins/migration.py:593
msgid ""
"Continuous operation mode. Errors are reported but the process continues"
msgstr ""

#: ipalib/plugins/migration.py:598
msgid "Base DN"
msgstr ""

#: ipalib/plugins/migration.py:599
msgid "Base DN on remote LDAP server"
msgstr ""

#: ipalib/plugins/migration.py:603
msgid "Ignore compat plugin"
msgstr ""

#: ipalib/plugins/migration.py:604
msgid "Allows migration despite the usage of compat plugin"
msgstr ""

#: ipalib/plugins/migration.py:609
msgid "CA certificate"
msgstr ""

#: ipalib/plugins/migration.py:610
msgid "Load CA certificate of LDAP server from FILE"
msgstr ""

#: ipalib/plugins/migration.py:618
msgid "Lists of objects migrated; categorized by type."
msgstr ""

#: ipalib/plugins/migration.py:622
msgid "Lists of objects that could not be migrated; categorized by type."
msgstr ""

#: ipalib/plugins/migration.py:626
msgid "False if migration mode was disabled."
msgstr ""

#: ipalib/plugins/migration.py:630
msgid "False if migration fails because the compatibility plug-in is enabled."
msgstr ""

#: ipalib/plugins/migration.py:634
#, python-format
msgid "%s to exclude from migration"
msgstr ""

#: ipalib/plugins/migration.py:636
msgid ""
"search results for objects to be migrated\n"
"have been truncated by the server;\n"
"migration process might be incomplete\n"
msgstr ""

#: ipalib/plugins/migration.py:641
msgid "Migration mode is disabled. Use 'ipa config-mod' to enable it."
msgstr ""

#: ipalib/plugins/migration.py:644
msgid ""
"Passwords have been migrated in pre-hashed format.\n"
"IPA is unable to generate Kerberos keys unless provided\n"
"with clear text passwords. All migrated users need to\n"
"login at https://your.domain/ipa/migration/ before they\n"
"can use their Kerberos accounts."
msgstr ""

#: ipalib/plugins/migration.py:730
#, python-format
msgid ""
"%(container)s LDAP search did not return any result (search base: "
"%(search_base)s, objectclass: %(objectclass)s)"
msgstr ""

#: ipalib/plugins/migration.py:762 ipalib/plugins/user.py:759
msgid "Default group for new users not found"
msgstr ""

#: ipalib/plugins/misc.py:26
msgid ""
"\n"
"Misc plug-ins\n"
msgstr ""

#: ipalib/plugins/misc.py:40
msgid "Show environment variables."
msgstr ""

#: ipalib/plugins/misc.py:42
#, python-format
msgid "%(count)d variables"
msgstr ""

#: ipalib/plugins/misc.py:51 ipalib/plugins/misc.py:119
msgid ""
"retrieve and print all attributes from the server. Affects command output."
msgstr ""

#: ipalib/plugins/misc.py:65
msgid "Total number of variables env (>= count)"
msgstr ""

#: ipalib/plugins/misc.py:70
msgid "Number of variables returned (<= total)"
msgstr ""

#: ipalib/plugins/misc.py:110
msgid "Show all loaded plugins."
msgstr ""

#: ipalib/plugins/misc.py:113
#, python-format
msgid "%(count)d plugin loaded"
msgid_plural "%(count)d plugins loaded"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/misc.py:130
msgid "Number of plugins loaded"
msgstr ""

#: ipalib/plugins/netgroup.py:29
msgid ""
"\n"
"Netgroups\n"
"\n"
"A netgroup is a group used for permission checking. It can contain both\n"
"user and host values.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new netgroup:\n"
"   ipa netgroup-add --desc=\"NFS admins\" admins\n"
"\n"
" Add members to the netgroup:\n"
"   ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n"
"\n"
" Remove a member from the netgroup:\n"
"   ipa netgroup-remove-member --users=tuser2 admins\n"
"\n"
" Display information about a netgroup:\n"
"   ipa netgroup-show admins\n"
"\n"
" Delete a netgroup:\n"
"   ipa netgroup-del admins\n"
msgstr ""

#: ipalib/plugins/netgroup.py:71
msgid "Member Host"
msgstr ""

#: ipalib/plugins/netgroup.py:85
msgid "netgroup"
msgstr ""

#: ipalib/plugins/netgroup.py:86
msgid "netgroups"
msgstr ""

#: ipalib/plugins/netgroup.py:165
msgid "Netgroups"
msgstr ""

#: ipalib/plugins/netgroup.py:166
msgid "Netgroup"
msgstr ""

#: ipalib/plugins/netgroup.py:173
msgid "Netgroup name"
msgstr ""

#: ipalib/plugins/netgroup.py:180
msgid "Netgroup description"
msgstr ""

#: ipalib/plugins/netgroup.py:186
msgid "NIS domain name"
msgstr ""

#: ipalib/plugins/netgroup.py:191
msgid "IPA unique ID"
msgstr ""

#: ipalib/plugins/netgroup.py:212
msgid "Add a new netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:215
#, python-format
msgid "Added netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:217
#, python-format
msgid ""
"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
"common namespace"
msgstr ""

#: ipalib/plugins/netgroup.py:248
msgid "Delete a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:250
#, python-format
msgid "Deleted netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:256
msgid "Modify a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:259
#, python-format
msgid "Modified netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:277
msgid "Search for a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:282
#, python-format
msgid "%(count)d netgroup matched"
msgid_plural "%(count)d netgroups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/netgroup.py:292
msgid "search for managed groups"
msgstr ""

#: ipalib/plugins/netgroup.py:314
msgid "Display information about a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:321
msgid "Add members to a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:343
msgid "Remove members from a netgroup."
msgstr ""

#: ipalib/plugins/otptoken.py:39
msgid ""
"\n"
"OTP Tokens\n"
msgstr ""

#: ipalib/plugins/otptoken.py:41
msgid ""
"\n"
"Manage OTP tokens.\n"
msgstr ""

#: ipalib/plugins/otptoken.py:43
msgid ""
"\n"
"IPA supports the use of OTP tokens for multi-factor authentication. This\n"
"code enables the management of OTP tokens.\n"
msgstr ""

#: ipalib/plugins/otptoken.py:48
msgid ""
"\n"
" Add a new token:\n"
"   ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n"
msgstr ""

#: ipalib/plugins/otptoken.py:51
msgid ""
"\n"
" Examine the token:\n"
"   ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n"
msgstr ""

#: ipalib/plugins/otptoken.py:54
msgid ""
"\n"
" Change the vendor:\n"
"   ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat"
"\"\n"
msgstr ""

#: ipalib/plugins/otptoken.py:57
msgid ""
"\n"
" Delete a token:\n"
"   ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n"
msgstr ""

#: ipalib/plugins/otptoken.py:113
msgid "OTP token"
msgstr ""

#: ipalib/plugins/otptoken.py:114
msgid "OTP tokens"
msgstr ""

#: ipalib/plugins/otptoken.py:130
msgid "OTP Tokens"
msgstr ""

#: ipalib/plugins/otptoken.py:131
msgid "OTP Token"
msgstr ""

#: ipalib/plugins/otptoken.py:136 ipalib/plugins/otptoken_yubikey.py:53
msgid "Unique ID"
msgstr ""

#: ipalib/plugins/otptoken.py:153
msgid "Owner"
msgstr ""

#: ipalib/plugins/otptoken.py:156 ipalib/plugins/user.py:560
msgid "Manager"
msgstr ""

#: ipalib/plugins/otptoken.py:161
msgid "Disabled state"
msgstr ""

#: ipalib/plugins/otptoken.py:165
msgid "Validity start"
msgstr ""

#: ipalib/plugins/otptoken.py:169
msgid "Validity end"
msgstr ""

#: ipalib/plugins/otptoken.py:173
msgid "Vendor"
msgstr ""

#: ipalib/plugins/otptoken.py:179
msgid "Model"
msgstr ""

#: ipalib/plugins/otptoken.py:185
msgid "Serial"
msgstr ""

#: ipalib/plugins/otptoken.py:206
msgid "Digits"
msgstr ""

#: ipalib/plugins/otptoken.py:214
msgid "Clock offset"
msgstr ""

#: ipalib/plugins/otptoken.py:221
msgid "Clock interval"
msgstr ""

#: ipalib/plugins/otptoken.py:229
msgid "Counter"
msgstr ""

#: ipalib/plugins/otptoken.py:240
msgid "Add a new OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:241
#, python-format
msgid "Added OTP token \"%(value)s\""
msgstr ""

#: ipalib/plugins/otptoken.py:244
msgid "Display QR code (requires wide terminal)"
msgstr ""

#: ipalib/plugins/otptoken.py:248
msgid "URI"
msgstr ""

#: ipalib/plugins/otptoken.py:329
msgid "Delete an OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:330
#, python-format
msgid "Deleted OTP token \"%(value)s\""
msgstr ""

#: ipalib/plugins/otptoken.py:335
msgid "Modify a OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:336
#, python-format
msgid "Modified OTP token \"%(value)s\""
msgstr ""

#: ipalib/plugins/otptoken.py:349
msgid "Search for OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:350
#, python-format
msgid "%(count)d OTP token matched"
msgid_plural "%(count)d OTP tokens matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/otptoken.py:376
msgid "Display information about an OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:384
msgid "Add users that can manage this token."
msgstr ""

#: ipalib/plugins/otptoken.py:436
msgid "Synchronize an OTP token."
msgstr ""

#: ipalib/plugins/otptoken.py:441
msgid "User ID"
msgstr ""

#: ipalib/plugins/otptoken.py:443
msgid "First Code"
msgstr ""

#: ipalib/plugins/otptoken.py:444
msgid "Second Code"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:30
msgid ""
"\n"
"YubiKey Tokens\n"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:32
msgid ""
"\n"
"Manage YubiKey tokens.\n"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:34
msgid ""
"\n"
"This code is an extension to the otptoken plugin and provides support for\n"
"reading/writing YubiKey tokens directly.\n"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:39
msgid ""
"\n"
" Add a new token:\n"
"   ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:48
msgid "Add a new YubiKey OTP token."
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:61
msgid "YubiKey slot"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:85
msgid "No YubiKey found"
msgstr ""

#: ipalib/plugins/otptoken_yubikey.py:95
msgid "No free YubiKey slot!"
msgstr ""

#: ipalib/plugins/passwd.py:30
msgid ""
"\n"
"Set a user's password\n"
"\n"
"If someone other than a user changes that user's password (e.g., Helpdesk\n"
"resets it) then the password will need to be changed the first time it\n"
"is used. This is so the end-user is the only one who knows the password.\n"
"\n"
"The IPA password policy controls how often a password may be changed,\n"
"what strength requirements exist, and the length of the password history.\n"
"\n"
"EXAMPLES:\n"
"\n"
" To reset your own password:\n"
"   ipa passwd\n"
"\n"
" To change another user's password:\n"
"   ipa passwd tuser1\n"
msgstr ""

#: ipalib/plugins/passwd.py:69
msgid "Set a user's password."
msgstr ""

#: ipalib/plugins/passwd.py:95
msgid "One Time Password"
msgstr ""

#: ipalib/plugins/passwd.py:101
#, python-format
msgid "Changed password for \"%(value)s\""
msgstr ""

#: ipalib/plugins/passwd.py:127
msgid "Invalid credentials"
msgstr ""

#: ipalib/plugins/permission.py:33
msgid ""
"\n"
"Permissions\n"
msgstr ""

#: ipalib/plugins/permission.py:35
msgid ""
"\n"
"A permission enables fine-grained delegation of rights. A permission is\n"
"a human-readable wrapper around a 389-ds Access Control Rule,\n"
"or instruction (ACI).\n"
"A permission grants the right to perform a specific task such as adding a\n"
"user, modifying a group, etc.\n"
msgstr ""

#: ipalib/plugins/permission.py:41
msgid ""
"\n"
"A permission may not contain other permissions.\n"
msgstr ""

#: ipalib/plugins/permission.py:43
msgid ""
"\n"
"* A permission grants access to read, write, add, delete, read, search,\n"
"  or compare.\n"
"* A privilege combines similar permissions (for example all the permissions\n"
"  needed to add a user).\n"
"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n"
msgstr ""

#: ipalib/plugins/permission.py:49
msgid ""
"\n"
"A permission is made up of a number of different parts:\n"
"\n"
"1. The name of the permission.\n"
"2. The target of the permission.\n"
"3. The rights granted by the permission.\n"
msgstr ""

#: ipalib/plugins/permission.py:55
msgid ""
"\n"
"Rights define what operations are allowed, and may be one or more\n"
"of the following:\n"
"1. write - write one or more attributes\n"
"2. read - read one or more attributes\n"
"3. search - search on one or more attributes\n"
"4. compare - compare one or more attributes\n"
"5. add - add a new entry to the tree\n"
"6. delete - delete an existing entry\n"
"7. all - all permissions are granted\n"
msgstr ""

#: ipalib/plugins/permission.py:65
msgid ""
"\n"
"Note the distinction between attributes and entries. The permissions are\n"
"independent, so being able to add a user does not mean that the user will\n"
"be editable.\n"
msgstr ""

#: ipalib/plugins/permission.py:69
msgid ""
"\n"
"There are a number of allowed targets:\n"
"1. subtree: a DN; the permission applies to the subtree under this DN\n"
"2. target filter: an LDAP filter\n"
"3. target: DN with possible wildcards, specifies entries permission applies "
"to\n"
msgstr ""

#: ipalib/plugins/permission.py:74
msgid ""
"\n"
"Additionally, there are the following convenience options.\n"
"Setting one of these options will set the corresponding attribute(s).\n"
"1. type: a type of object (user, group, etc); sets subtree and target "
"filter.\n"
"2. memberof: apply to members of a group; sets target filter\n"
"3. targetgroup: grant access to modify a specific group (such as granting\n"
"   the rights to manage group membership); sets target.\n"
msgstr ""

#: ipalib/plugins/permission.py:81
msgid ""
"\n"
"Managed permissions\n"
msgstr ""

#: ipalib/plugins/permission.py:83
msgid ""
"\n"
"Permissions that come with IPA by default can be so-called \"managed\"\n"
"permissions. These have a default set of attributes they apply to,\n"
"but the administrator can add/remove individual attributes to/from the set.\n"
msgstr ""

#: ipalib/plugins/permission.py:87
msgid ""
"\n"
"Deleting or renaming a managed permission, as well as changing its target,\n"
"is not allowed.\n"
msgstr ""

#: ipalib/plugins/permission.py:92
msgid ""
"\n"
" Add a permission that grants the creation of users:\n"
"   ipa permission-add --type=user --permissions=add \"Add Users\"\n"
msgstr ""

#: ipalib/plugins/permission.py:95
msgid ""
"\n"
" Add a permission that grants the ability to manage group membership:\n"
"   ipa permission-add --attrs=member --permissions=write --type=group "
"\"Manage Group Members\"\n"
msgstr ""

#: ipalib/plugins/permission.py:126
msgid "must be enclosed in parentheses"
msgstr ""

#: ipalib/plugins/permission.py:145
#, python-format
msgid "\"%s\" is not an object type"
msgstr ""

#: ipalib/plugins/permission.py:147 ipalib/plugins/permission.py:837
#, python-format
msgid "\"%s\" is not a valid permission type"
msgstr ""

#: ipalib/plugins/permission.py:168
msgid "permission"
msgstr ""

#: ipalib/plugins/permission.py:169
msgid "permissions"
msgstr ""

#: ipalib/plugins/permission.py:224
msgid "Permission name"
msgstr ""

#: ipalib/plugins/permission.py:234
msgid "Granted rights"
msgstr ""

#: ipalib/plugins/permission.py:235
msgid "Rights to grant (read, search, compare, write, add, delete, all)"
msgstr ""

#: ipalib/plugins/permission.py:241
msgid "Effective attributes"
msgstr ""

#: ipalib/plugins/permission.py:242
msgid "All attributes to which the permission applies"
msgstr ""

#: ipalib/plugins/permission.py:247
msgid "Included attributes"
msgstr ""

#: ipalib/plugins/permission.py:248
msgid "User-specified attributes to which the permission applies"
msgstr ""

#: ipalib/plugins/permission.py:253
msgid "Excluded attributes"
msgstr ""

#: ipalib/plugins/permission.py:254
msgid ""
"User-specified attributes to which the permission explicitly does not apply"
msgstr ""

#: ipalib/plugins/permission.py:260
msgid "Default attributes"
msgstr ""

#: ipalib/plugins/permission.py:261
msgid "Attributes to which the permission applies by default"
msgstr ""

#: ipalib/plugins/permission.py:267 ipalib/plugins/permission.py:268
msgid "Bind rule type"
msgstr ""

#: ipalib/plugins/permission.py:278
msgid "Subtree to apply permissions to"
msgstr ""

#: ipalib/plugins/permission.py:284 ipalib/plugins/permission.py:285
msgid "Extra target filter"
msgstr ""

#: ipalib/plugins/permission.py:291
msgid "Raw target filter"
msgstr ""

#: ipalib/plugins/permission.py:292
msgid "All target filters, including those implied by type and memberof"
msgstr ""

#: ipalib/plugins/permission.py:299
msgid "ACI target DN"
msgstr ""

#: ipalib/plugins/permission.py:304
msgid "Member of group"
msgstr ""

#: ipalib/plugins/permission.py:305
msgid "Target members of a group (sets memberOf targetfilter)"
msgstr ""

#: ipalib/plugins/permission.py:310
msgid "User group to apply permissions to (sets target)"
msgstr ""

#: ipalib/plugins/permission.py:316
msgid "Type of IPA object (sets subtree and objectClass targetfilter)"
msgstr ""

#: ipalib/plugins/permission.py:322
#, python-format
msgid "Deprecated; use %s"
msgstr ""

#: ipalib/plugins/permission.py:333
#, python-format
msgid "Permission with unknown flag %s may not be modified or removed"
msgstr ""

#: ipalib/plugins/permission.py:337
msgid "A SYSTEM permission may not be modified or removed"
msgstr ""

#: ipalib/plugins/permission.py:565
#, python-format
msgid "Entry %s not found"
msgstr ""

#: ipalib/plugins/permission.py:656
#, python-format
msgid "The ACI for permission %(name)s was not found in %(dn)s "
msgstr ""

#: ipalib/plugins/permission.py:760
msgid ""
"cannot specify full target filter and extra target filter simultaneously"
msgstr ""

#: ipalib/plugins/permission.py:783
#, python-format
msgid "option was renamed; use %s"
msgstr ""

#: ipalib/plugins/permission.py:787
#, python-format
msgid "Cannot use %(old_name)s with %(new_name)s"
msgstr ""

#: ipalib/plugins/permission.py:801 ipalib/plugins/permission.py:816
#, python-format
msgid "%s: group not found"
msgstr ""

#: ipalib/plugins/permission.py:811
msgid "target and targetgroup are mutually exclusive"
msgstr ""

#: ipalib/plugins/permission.py:832
msgid "subtree and type are mutually exclusive"
msgstr ""

#: ipalib/plugins/permission.py:868
msgid "Bad search filter"
msgstr ""

#: ipalib/plugins/permission.py:878
#, python-format
msgid "Entry %s does not exist"
msgstr ""

#: ipalib/plugins/permission.py:887
msgid ""
"there must be at least one target entry specifier (e.g. target, "
"targetfilter, attrs)"
msgstr ""

#: ipalib/plugins/permission.py:897
msgid "Add a system permission without an ACI (internal command)"
msgstr ""

#: ipalib/plugins/permission.py:899 ipalib/plugins/permission.py:930
#, python-format
msgid "Added permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:905
msgid "Permission flags"
msgstr ""

#: ipalib/plugins/permission.py:928
msgid "Add a new permission."
msgstr ""

#: ipalib/plugins/permission.py:956
msgid "attrs and included attributes are mutually exclusive"
msgstr ""

#: ipalib/plugins/permission.py:990
msgid "Delete a permission."
msgstr ""

#: ipalib/plugins/permission.py:992
#, python-format
msgid "Deleted permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:998
msgid "force delete of SYSTEM permissions"
msgstr ""

#: ipalib/plugins/permission.py:1012
msgid "cannot delete managed permissions"
msgstr ""

#: ipalib/plugins/permission.py:1018
#, python-format
msgid "ACI of permission %s was not found"
msgstr ""

#: ipalib/plugins/permission.py:1025
msgid "Modify a permission."
msgstr ""

#: ipalib/plugins/permission.py:1027
#, python-format
msgid "Modified permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:1061
msgid "cannot rename managed permissions"
msgstr ""

#: ipalib/plugins/permission.py:1068 ipalib/plugins/permission.py:1072
msgid "not modifiable on managed permissions"
msgstr ""

#: ipalib/plugins/permission.py:1079
msgid "only available on managed permissions"
msgstr ""

#: ipalib/plugins/permission.py:1086 ipalib/plugins/permission.py:1206
msgid "attrs and included/excluded attributes are mutually exclusive"
msgstr ""

#: ipalib/plugins/permission.py:1097
msgid "cannot set bindtype for a permission that is assigned to a privilege"
msgstr ""

#: ipalib/plugins/permission.py:1191
msgid "Search for permissions."
msgstr ""

#: ipalib/plugins/permission.py:1194
#, python-format
msgid "%(count)d permission matched"
msgid_plural "%(count)d permissions matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/permission.py:1321
msgid "Display information about a permission."
msgstr ""

#: ipalib/plugins/ping.py:26
msgid ""
"\n"
"Ping the remote IPA server to ensure it is running.\n"
"\n"
"The ping command sends an echo request to an IPA server. The server\n"
"returns its version information. This is used by an IPA client\n"
"to confirm that the server is available and accepting requests.\n"
"\n"
"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n"
"If it does not respond then the client will contact any servers defined\n"
"by ldap SRV records in DNS.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Ping an IPA server:\n"
"   ipa ping\n"
"   ------------------------------------------\n"
"   IPA server version 2.1.9. API version 2.20\n"
"   ------------------------------------------\n"
"\n"
" Ping an IPA server verbosely:\n"
"   ipa -v ping\n"
"   ipa: INFO: trying https://ipa.example.com/ipa/xml\n"
"   ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n"
"   -----------------------------------------------------\n"
"   IPA server version 2.1.9. API version 2.20\n"
"   -----------------------------------------------------\n"
msgstr ""

#: ipalib/plugins/ping.py:59
msgid "Ping a remote server."
msgstr ""

#: ipalib/plugins/pkinit.py:27
msgid ""
"\n"
"Kerberos pkinit options\n"
"\n"
"Enable or disable anonymous pkinit using the principal\n"
"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n"
"pkinit support.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Enable anonymous pkinit:\n"
"  ipa pkinit-anonymous enable\n"
"\n"
" Disable anonymous pkinit:\n"
"  ipa pkinit-anonymous disable\n"
"\n"
"For more information on anonymous pkinit see:\n"
"\n"
"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n"
msgstr ""

#: ipalib/plugins/pkinit.py:54
msgid "pkinit"
msgstr ""

#: ipalib/plugins/pkinit.py:56
msgid "PKINIT"
msgstr ""

#: ipalib/plugins/pkinit.py:67
#, python-format
msgid "Unknown command %s"
msgstr ""

#: ipalib/plugins/pkinit.py:72
msgid "Enable or Disable Anonymous PKINIT."
msgstr ""

#: ipalib/plugins/privilege.py:24
msgid ""
"\n"
"Privileges\n"
"\n"
"A privilege combines permissions into a logical task. A permission provides\n"
"the rights to do a single task. There are some IPA operations that require\n"
"multiple permissions to succeed. A privilege is where permissions are\n"
"combined in order to perform a specific task.\n"
"\n"
"For example, adding a user requires the following permissions:\n"
" * Creating a new user entry\n"
" * Resetting a user password\n"
" * Adding the new user to the default IPA users group\n"
"\n"
"Combining these three low-level tasks into a higher level task in the\n"
"form of a privilege named \"Add User\" makes it easier to manage Roles.\n"
"\n"
"A privilege may not contain other privileges.\n"
"\n"
"See role and permission for additional information.\n"
msgstr ""

#: ipalib/plugins/privilege.py:54
msgid "privilege"
msgstr ""

#: ipalib/plugins/privilege.py:55
msgid "privileges"
msgstr ""

#: ipalib/plugins/privilege.py:96
msgid "Privileges"
msgstr ""

#: ipalib/plugins/privilege.py:97
msgid "Privilege"
msgstr ""

#: ipalib/plugins/privilege.py:102
msgid "Privilege name"
msgstr ""

#: ipalib/plugins/privilege.py:108
msgid "Privilege description"
msgstr ""

#: ipalib/plugins/privilege.py:115
msgid "Add a new privilege."
msgstr ""

#: ipalib/plugins/privilege.py:117
#, python-format
msgid "Added privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:122
msgid "Delete a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:124
#, python-format
msgid "Deleted privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:129
msgid "Modify a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:131
#, python-format
msgid "Modified privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:136
msgid "Search for privileges."
msgstr ""

#: ipalib/plugins/privilege.py:139
#, python-format
msgid "%(count)d privilege matched"
msgid_plural "%(count)d privileges matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/privilege.py:145
msgid "Display information about a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:150
msgid "Add members to a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:165
msgid "Add permissions to a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:180
msgid "Number of permissions added"
msgstr ""

#: ipalib/plugins/privilege.py:205
#, python-format
msgid ""
"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a "
"privilege"
msgstr ""

#: ipalib/plugins/privilege.py:218
msgid "Remove permissions from a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:235
msgid "Number of permissions removed"
msgstr ""

#: ipalib/plugins/pwpolicy.py:31
msgid ""
"\n"
"Password policy\n"
"\n"
"A password policy sets limitations on IPA passwords, including maximum\n"
"lifetime, minimum lifetime, the number of passwords to save in\n"
"history, the number of character classes required (for stronger passwords)\n"
"and the minimum password length.\n"
"\n"
"By default there is a single, global policy for all users. You can also\n"
"create a password policy to apply to a group. Each user is only subject\n"
"to one password policy, either the group policy or the global policy. A\n"
"group policy stands alone; it is not a super-set of the global policy plus\n"
"custom settings.\n"
"\n"
"Each group password policy requires a unique priority setting. If a user\n"
"is in multiple groups that have password policies, this priority determines\n"
"which password policy is applied. A lower value indicates a higher priority\n"
"policy.\n"
"\n"
"Group password policies are automatically removed when the groups they\n"
"are associated with are removed.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Modify the global policy:\n"
"   ipa pwpolicy-mod --minlength=10\n"
"\n"
" Add a new group password policy:\n"
"   ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --"
"minlength=8 --priority=10 localadmins\n"
"\n"
" Display the global password policy:\n"
"   ipa pwpolicy-show\n"
"\n"
" Display a group password policy:\n"
"   ipa pwpolicy-show localadmins\n"
"\n"
" Display the policy that would be applied to a given user:\n"
"   ipa pwpolicy-show --user=tuser1\n"
"\n"
" Modify a group password policy:\n"
"   ipa pwpolicy-mod --minclasses=2 localadmins\n"
msgstr ""

#: ipalib/plugins/pwpolicy.py:130
#, python-format
msgid "priority must be a unique value (%(prio)d already used by %(gname)s)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:214
msgid "password policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:215
msgid "password policies"
msgstr ""

#: ipalib/plugins/pwpolicy.py:284
msgid "Max failures"
msgstr ""

#: ipalib/plugins/pwpolicy.py:285
msgid "Consecutive failures before lockout"
msgstr ""

#: ipalib/plugins/pwpolicy.py:290
msgid "Failure reset interval"
msgstr ""

#: ipalib/plugins/pwpolicy.py:291
msgid "Period after which failure count will be reset (seconds)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:296
msgid "Lockout duration"
msgstr ""

#: ipalib/plugins/pwpolicy.py:297
msgid "Period for which lockout is enforced (seconds)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:302
msgid "Password Policies"
msgstr ""

#: ipalib/plugins/pwpolicy.py:308
msgid "Group"
msgstr ""

#: ipalib/plugins/pwpolicy.py:309
msgid "Manage password policy for specific group"
msgstr ""

#: ipalib/plugins/pwpolicy.py:314
msgid "Max lifetime (days)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:315
msgid "Maximum password lifetime (in days)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:321
msgid "Min lifetime (hours)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:322
msgid "Minimum password lifetime (in hours)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:327
msgid "History size"
msgstr ""

#: ipalib/plugins/pwpolicy.py:328
msgid "Password history size"
msgstr ""

#: ipalib/plugins/pwpolicy.py:333
msgid "Character classes"
msgstr ""

#: ipalib/plugins/pwpolicy.py:334
msgid "Minimum number of character classes"
msgstr ""

#: ipalib/plugins/pwpolicy.py:340
msgid "Min length"
msgstr ""

#: ipalib/plugins/pwpolicy.py:341
msgid "Minimum length of password"
msgstr ""

#: ipalib/plugins/pwpolicy.py:347
msgid "Priority of the policy (higher number means lower priority"
msgstr ""

#: ipalib/plugins/pwpolicy.py:401
msgid "Maximum password life must be greater than minimum."
msgstr ""

#: ipalib/plugins/pwpolicy.py:419
msgid "Add a new group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:445
msgid "Delete a group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:457
msgid "cannot delete global password policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:472
msgid "Modify a group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:483
msgid "priority cannot be set on global policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:515
msgid "Display information about password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:520
msgid "Display effective policy for a specific user"
msgstr ""

#: ipalib/plugins/pwpolicy.py:544
msgid "Search for group password policies."
msgstr ""

#: ipalib/plugins/radiusproxy.py:27
msgid ""
"\n"
"RADIUS Proxy Servers\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:29
msgid ""
"\n"
"Manage RADIUS Proxy Servers.\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:31
msgid ""
"\n"
"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n"
"authentications. This permits a great deal of flexibility when\n"
"integrating with third-party authentication services.\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:37
msgid ""
"\n"
" Add a new server:\n"
"   ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:40
msgid ""
"\n"
" Find all servers whose entries include the string \"example.com\":\n"
"   ipa radiusproxy-find example.com\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:43
msgid ""
"\n"
" Examine the configuration:\n"
"   ipa radiusproxy-show MyRADIUS\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:46
msgid ""
"\n"
" Change the secret:\n"
"   ipa radiusproxy-mod MyRADIUS --secret\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:49
msgid ""
"\n"
" Delete a configuration:\n"
"   ipa radiusproxy-del MyRADIUS\n"
msgstr ""

#: ipalib/plugins/radiusproxy.py:60
msgid "invalid attribute name"
msgstr ""

#: ipalib/plugins/radiusproxy.py:72
msgid "invalid port number"
msgstr ""

#: ipalib/plugins/radiusproxy.py:90
msgid "RADIUS proxy server"
msgstr ""

#: ipalib/plugins/radiusproxy.py:91
msgid "RADIUS proxy servers"
msgstr ""

#: ipalib/plugins/radiusproxy.py:98
msgid "RADIUS Servers"
msgstr ""

#: ipalib/plugins/radiusproxy.py:99
msgid "RADIUS Server"
msgstr ""

#: ipalib/plugins/radiusproxy.py:104
msgid "RADIUS proxy server name"
msgstr ""

#: ipalib/plugins/radiusproxy.py:110
msgid "A description of this RADIUS proxy server"
msgstr ""

#: ipalib/plugins/radiusproxy.py:114 ipalib/plugins/user.py:101
msgid "Server"
msgstr ""

#: ipalib/plugins/radiusproxy.py:115
msgid "The hostname or IP (with or without port)"
msgstr ""

#: ipalib/plugins/radiusproxy.py:119
msgid "Secret"
msgstr ""

#: ipalib/plugins/radiusproxy.py:120
msgid "The secret used to encrypt data"
msgstr ""

#: ipalib/plugins/radiusproxy.py:126
msgid "Timeout"
msgstr ""

#: ipalib/plugins/radiusproxy.py:127
msgid "The total timeout across all retries (in seconds)"
msgstr ""

#: ipalib/plugins/radiusproxy.py:132
msgid "Retries"
msgstr ""

#: ipalib/plugins/radiusproxy.py:133
msgid "The number of times to retry authentication"
msgstr ""

#: ipalib/plugins/radiusproxy.py:139
msgid "User attribute"
msgstr ""

#: ipalib/plugins/radiusproxy.py:140
msgid "The username attribute on the user object"
msgstr ""

#: ipalib/plugins/radiusproxy.py:146
msgid "Add a new RADIUS proxy server."
msgstr ""

#: ipalib/plugins/radiusproxy.py:147
#, python-format
msgid "Added RADIUS proxy server \"%(value)s\""
msgstr ""

#: ipalib/plugins/radiusproxy.py:151
msgid "Delete a RADIUS proxy server."
msgstr ""

#: ipalib/plugins/radiusproxy.py:152
#, python-format
msgid "Deleted RADIUS proxy server \"%(value)s\""
msgstr ""

#: ipalib/plugins/radiusproxy.py:156
msgid "Modify a RADIUS proxy server."
msgstr ""

#: ipalib/plugins/radiusproxy.py:157
#, python-format
msgid "Modified RADIUS proxy server \"%(value)s\""
msgstr ""

#: ipalib/plugins/radiusproxy.py:161
msgid "Search for RADIUS proxy servers."
msgstr ""

#: ipalib/plugins/radiusproxy.py:163
#, python-format
msgid "%(count)d RADIUS proxy server matched"
msgid_plural "%(count)d RADIUS proxy servers matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/radiusproxy.py:168
msgid "Display information about a RADIUS proxy server."
msgstr ""

#: ipalib/plugins/realmdomains.py:30
msgid ""
"\n"
"Realm domains\n"
"\n"
"Manage the list of domains associated with IPA realm.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Display the current list of realm domains:\n"
"   ipa realmdomains-show\n"
"\n"
" Replace the list of realm domains:\n"
"   ipa realmdomains-mod --domain=example.com\n"
"   ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n"
"\n"
" Add a domain to the list of realm domains:\n"
"   ipa realmdomains-mod --add-domain=newdomain.com\n"
"\n"
" Delete a domain from the list of realm domains:\n"
"   ipa realmdomains-mod --del-domain=olddomain.com\n"
msgstr ""

#: ipalib/plugins/realmdomains.py:70
msgid "Realm domains"
msgstr ""

#: ipalib/plugins/realmdomains.py:106
msgid "Add domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:112
msgid "Delete domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:120
msgid "Modify realm domains."
msgstr ""

#: ipalib/plugins/realmdomains.py:125
msgid "Force adding domain even if not in DNS"
msgstr ""

#: ipalib/plugins/realmdomains.py:138
msgid ""
"you cannot specify the --domain option together with --add-domain or --del-"
"domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:140 ipalib/plugins/realmdomains.py:160
msgid "cannot delete domain of IPA server"
msgstr ""

#: ipalib/plugins/realmdomains.py:145
#, python-format
msgid "no SOA or NS records found for domains: %s"
msgstr ""

#: ipalib/plugins/realmdomains.py:154
#, python-format
msgid "no SOA or NS records found for domain %s"
msgstr ""

#: ipalib/plugins/realmdomains.py:217
msgid "Display the list of realm domains."
msgstr ""

#: ipalib/plugins/role.py:27
msgid ""
"\n"
"Roles\n"
"\n"
"A role is used for fine-grained delegation. A permission grants the ability\n"
"to perform given low-level tasks (add a user, modify a group, etc.). A\n"
"privilege combines one or more permissions into a higher-level abstraction\n"
"such as useradmin. A useradmin would be able to add, delete and modify "
"users.\n"
"\n"
"Privileges are assigned to Roles.\n"
"\n"
"Users, groups, hosts and hostgroups may be members of a Role.\n"
"\n"
"Roles can not contain other roles.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new role:\n"
"   ipa role-add --desc=\"Junior-level admin\" junioradmin\n"
"\n"
" Add some privileges to this role:\n"
"   ipa role-add-privilege --privileges=addusers junioradmin\n"
"   ipa role-add-privilege --privileges=change_password junioradmin\n"
"   ipa role-add-privilege --privileges=add_user_to_default_group "
"junioradmin\n"
"\n"
" Add a group of users to this role:\n"
"   ipa group-add --desc=\"User admins\" useradmins\n"
"   ipa role-add-member --groups=useradmins junioradmin\n"
"\n"
" Display information about a role:\n"
"   ipa role-show junioradmin\n"
"\n"
" The result of this is that any users in the group 'junioradmin' can\n"
" add users, reset passwords or add a user to the default IPA user group.\n"
msgstr ""

#: ipalib/plugins/role.py:70
msgid "role"
msgstr ""

#: ipalib/plugins/role.py:71
msgid "roles"
msgstr ""

#: ipalib/plugins/role.py:129
msgid "Role"
msgstr ""

#: ipalib/plugins/role.py:134
msgid "Role name"
msgstr ""

#: ipalib/plugins/role.py:140
msgid "A description of this role-group"
msgstr ""

#: ipalib/plugins/role.py:148
msgid "Add a new role."
msgstr ""

#: ipalib/plugins/role.py:150
#, python-format
msgid "Added role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:156
msgid "Delete a role."
msgstr ""

#: ipalib/plugins/role.py:158
#, python-format
msgid "Deleted role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:164
msgid "Modify a role."
msgstr ""

#: ipalib/plugins/role.py:166
#, python-format
msgid "Modified role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:172
msgid "Search for roles."
msgstr ""

#: ipalib/plugins/role.py:175
#, python-format
msgid "%(count)d role matched"
msgid_plural "%(count)d roles matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/role.py:182
msgid "Display information about a role."
msgstr ""

#: ipalib/plugins/role.py:188
msgid "Add members to a role."
msgstr ""

#: ipalib/plugins/role.py:194
msgid "Remove members from a role."
msgstr ""

#: ipalib/plugins/role.py:200
msgid "Add privileges to a role."
msgstr ""

#: ipalib/plugins/role.py:215
msgid "Number of privileges added"
msgstr ""

#: ipalib/plugins/role.py:223
msgid "Remove privileges from a role."
msgstr ""

#: ipalib/plugins/role.py:238
msgid "Number of privileges removed"
msgstr ""

#: ipalib/plugins/selfservice.py:29
msgid ""
"\n"
"Self-service Permissions\n"
"\n"
"A permission enables fine-grained delegation of permissions. Access Control\n"
"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
"given tasks such as adding a user, modifying a group, etc.\n"
"\n"
"A Self-service permission defines what an object can change in its own "
"entry.\n"
"\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a self-service rule to allow users to manage their address (using Bash\n"
" brace expansion):\n"
"   ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c,"
"st} \"Users manage their own address\"\n"
"\n"
" When managing the list of attributes you need to include all attributes\n"
" in the list, including existing ones.\n"
" Add telephoneNumber to the list (using Bash brace expansion):\n"
"   ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} "
"\"Users manage their own address\"\n"
"\n"
" Display our updated rule:\n"
"   ipa selfservice-show \"Users manage their own address\"\n"
"\n"
" Delete a rule:\n"
"   ipa selfservice-del \"Users manage their own address\"\n"
msgstr ""

#: ipalib/plugins/selfservice.py:75
msgid "self service permission"
msgstr ""

#: ipalib/plugins/selfservice.py:76
msgid "self service permissions"
msgstr ""

#: ipalib/plugins/selfservice.py:77
msgid "Self Service Permissions"
msgstr ""

#: ipalib/plugins/selfservice.py:78
msgid "Self Service Permission"
msgstr ""

#: ipalib/plugins/selfservice.py:83 ipalib/plugins/selfservice.py:84
msgid "Self-service name"
msgstr ""

#: ipalib/plugins/selfservice.py:98
msgid "Attributes to which the permission applies."
msgstr ""

#: ipalib/plugins/selfservice.py:127
msgid "Add a new self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:129
#, python-format
msgid "Added selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:149
msgid "Delete a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:152
#, python-format
msgid "Deleted selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:167
msgid "Modify a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:169
#, python-format
msgid "Modified selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:189
msgid "Search for a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:192
#, python-format
msgid "%(count)d selfservice matched"
msgid_plural "%(count)d selfservices matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/selfservice.py:216
msgid "Display information about a self-service permission."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:27
msgid ""
"\n"
"SELinux User Mapping\n"
"\n"
"Map IPA users to SELinux users by host.\n"
"\n"
"Hosts, hostgroups, users and groups can be either defined within\n"
"the rule or it may point to an existing HBAC rule. When using\n"
"--hbacrule option to selinuxusermap-find an exact match is made on the\n"
"HBAC rule name, so only one or zero entries will be returned.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host "
"\"server\":\n"
"   ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n"
"   ipa selinuxusermap-add-host --hosts=server.example.com test1\n"
"\n"
" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an "
"existing HBAC rule for users and hosts:\n"
"   ipa selinuxusermap-add --usercat=all --hbacrule=webserver --"
"selinuxuser=guest_u:s0 test2\n"
"\n"
" Display the properties of a rule:\n"
"   ipa selinuxusermap-show test2\n"
"\n"
" Create a rule for a specific user. This sets the SELinux context for\n"
" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n"
"   ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0."
"c1023 john_unconfined\n"
"   ipa selinuxusermap-add-user --users=john john_unconfined\n"
"\n"
" Disable a rule:\n"
"   ipa selinuxusermap-disable test1\n"
"\n"
" Enable a rule:\n"
"   ipa selinuxusermap-enable test1\n"
"\n"
" Find a rule referencing a specific HBAC rule:\n"
"   ipa selinuxusermap-find --hbacrule=allow_some\n"
"\n"
" Remove a rule:\n"
"   ipa selinuxusermap-del john_unconfined\n"
"\n"
"SEEALSO:\n"
"\n"
" The list controlling the order in which the SELinux user map is applied\n"
" and the default SELinux user are available in the config-show command.\n"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:74
msgid "HBAC rule and local members cannot both be set"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:101
msgid "Invalid SELinux user name, only a-Z and _ are allowed"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:103
msgid "Invalid MLS value, must match s[0-15](-s[0-15])"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:106
msgid ""
"Invalid MCS value, must match c[0-1023].c[0-1023] and/or c[0-1023]-c[0-c0123]"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:121
msgid "SELinux user map list not found in configuration"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:126
#, python-format
msgid "SELinux user %(user)s not found in ordering list (in config)"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:138
msgid "SELinux User Map rule"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:139
msgid "SELinux User Map rules"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:195
msgid "SELinux User Maps"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:196
msgid "SELinux User Map"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:206
msgid "SELinux User"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:211
msgid "HBAC Rule that defines the users, groups and hostgroups"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:271
#, python-format
msgid "HBAC rule %(rule)s not found"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:290
msgid "Create a new SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:292
#, python-format
msgid "Added SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:327
msgid "Delete a SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:329
#, python-format
msgid "Deleted SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:335
msgid "Modify a SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:337
#, python-format
msgid "Modified SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:391
msgid "Search for SELinux User Maps."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:394
#, python-format
msgid "%(count)d SELinux User Map matched"
msgid_plural "%(count)d SELinux User Maps matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/selinuxusermap.py:423
msgid "Display the properties of a SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:434
msgid "Enable an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:436
#, python-format
msgid "Enabled SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:464
msgid "Disable an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:466
#, python-format
msgid "Disabled SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:494
msgid "Add users and groups to an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:518
msgid "Remove users and groups from an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:527
msgid "Add target hosts and hostgroups to an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:551
msgid "Remove target hosts and hostgroups from an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/service.py:36
msgid ""
"\n"
"Services\n"
"\n"
"A IPA service represents a service that runs on a host. The IPA service\n"
"record can store a Kerberos principal, an SSL certificate, or both.\n"
"\n"
"An IPA service can be managed directly from a machine, provided that\n"
"machine has been given the correct permission. This is true even for\n"
"machines other than the one the service is associated with. For example,\n"
"requesting an SSL certificate using the host service principal credentials\n"
"of the host. To manage a service using host credentials you need to\n"
"kinit as the host:\n"
"\n"
" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n"
"\n"
"Adding an IPA service allows the associated service to request an SSL\n"
"certificate or keytab, but this is performed as a separate step; they\n"
"are not produced as a result of adding the service.\n"
"\n"
"Only the public aspect of a certificate is stored in a service record;\n"
"the private key is not stored.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new IPA service:\n"
"   ipa service-add HTTP/web.example.com\n"
"\n"
" Allow a host to manage an IPA service certificate:\n"
"   ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n"
"   ipa role-add-member --hosts=web.example.com certadmin\n"
"\n"
" Override a default list of supported PAC types for the service:\n"
"   ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n"
"\n"
"   A typical use case where overriding the PAC type is needed is NFS.\n"
"   Currently the related code in the Linux kernel can only handle Kerberos\n"
"   tickets up to a maximal size. Since the PAC data can become quite large "
"it\n"
"   is recommended to set --pac-type=NONE for NFS services.\n"
"\n"
" Delete an IPA service:\n"
"   ipa service-del HTTP/web.example.com\n"
"\n"
" Find all IPA services associated with a host:\n"
"   ipa service-find web.example.com\n"
"\n"
" Find all HTTP services:\n"
"   ipa service-find HTTP\n"
"\n"
" Disable the service Kerberos key and SSL certificate:\n"
"   ipa service-disable HTTP/web.example.com\n"
"\n"
" Request a certificate for an IPA service:\n"
"   ipa cert-request --principal=HTTP/web.example.com example.csr\n"
"\n"
" Generate and retrieve a keytab for an IPA service:\n"
"   ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/"
"httpd.keytab\n"
"\n"
msgstr ""

#: ipalib/plugins/service.py:136
msgid "Requires pre-authentication"
msgstr ""

#: ipalib/plugins/service.py:137
msgid "Pre-authentication is required for the service"
msgstr ""

#: ipalib/plugins/service.py:142
msgid "Trusted for delegation"
msgstr ""

#: ipalib/plugins/service.py:143
msgid "Client credentials may be delegated to the service"
msgstr ""

#: ipalib/plugins/service.py:162
msgid "missing service"
msgstr ""

#: ipalib/plugins/service.py:166
msgid "blank service"
msgstr ""

#: ipalib/plugins/service.py:170
msgid "unable to determine realm"
msgstr ""

#: ipalib/plugins/service.py:243
msgid "This principal is required by the IPA master"
msgstr ""

#: ipalib/plugins/service.py:299
msgid "service"
msgstr ""

#: ipalib/plugins/service.py:300
msgid "services"
msgstr ""

#: ipalib/plugins/service.py:372
msgid "Service principal"
msgstr ""

#: ipalib/plugins/service.py:384
msgid "PAC type"
msgstr ""

#: ipalib/plugins/service.py:385
msgid ""
"Override default list of supported PAC types. Use 'NONE' to disable PAC "
"support for this service, e.g. this might be necessary for NFS services."
msgstr ""

#: ipalib/plugins/service.py:406
msgid "NONE value cannot be combined with other PAC types"
msgstr ""

#: ipalib/plugins/service.py:412
msgid "Add a new IPA new service."
msgstr ""

#: ipalib/plugins/service.py:414
#, python-format
msgid "Added service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:420
msgid "force principal name even if not in DNS"
msgstr ""

#: ipalib/plugins/service.py:434
#, python-format
msgid "The host '%s' does not exist to add a service to."
msgstr ""

#: ipalib/plugins/service.py:474
msgid "Delete an IPA service."
msgstr ""

#: ipalib/plugins/service.py:476
#, python-format
msgid "Deleted service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:519
msgid "Modify an existing IPA service."
msgstr ""

#: ipalib/plugins/service.py:521
#, python-format
msgid "Modified service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:566
msgid "Search for IPA services."
msgstr ""

#: ipalib/plugins/service.py:569
#, python-format
msgid "%(count)d service matched"
msgid_plural "%(count)d services matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/service.py:603
msgid "Display information about an IPA service."
msgstr ""

#: ipalib/plugins/service.py:638
msgid "Add hosts that can manage this service."
msgstr ""

#: ipalib/plugins/service.py:647
msgid "Remove hosts that can manage this service."
msgstr ""

#: ipalib/plugins/service.py:656
msgid "Disable the Kerberos key and SSL certificate of a service."
msgstr ""

#: ipalib/plugins/service.py:659
#, python-format
msgid "Disabled service \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:30
msgid ""
"\n"
"Sudo Commands\n"
"\n"
"Commands used as building blocks for sudo\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a new command\n"
"   ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n"
"\n"
" Remove a command\n"
"   ipa sudocmd-del /usr/bin/less\n"
"\n"
msgstr ""

#: ipalib/plugins/sudocmd.py:47 ipalib/plugins/sudocmdgroup.py:51
msgid "commands for controlling sudo configuration"
msgstr ""

#: ipalib/plugins/sudocmd.py:55
msgid "sudo command"
msgstr ""

#: ipalib/plugins/sudocmd.py:56
msgid "sudo commands"
msgstr ""

#: ipalib/plugins/sudocmd.py:108
msgid "Sudo Commands"
msgstr ""

#: ipalib/plugins/sudocmd.py:109 ipalib/plugins/sudocmd.py:114
msgid "Sudo Command"
msgstr ""

#: ipalib/plugins/sudocmd.py:120
msgid "A description of this command"
msgstr ""

#: ipalib/plugins/sudocmd.py:143
msgid "Create new Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:145
#, python-format
msgid "Added Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:150
msgid "Delete Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:152
#, python-format
msgid "Deleted Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:183
msgid "Modify Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:185
#, python-format
msgid "Modified Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:190
msgid "Search for Sudo Commands."
msgstr ""

#: ipalib/plugins/sudocmd.py:193
#, python-format
msgid "%(count)d Sudo Command matched"
msgid_plural "%(count)d Sudo Commands matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudocmd.py:199
msgid "Display Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:26
msgid ""
"\n"
"Groups of Sudo Commands\n"
"\n"
"Manage groups of Sudo Commands.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new Sudo Command Group:\n"
"   ipa sudocmdgroup-add --desc='administrators commands' admincmds\n"
"\n"
" Remove a Sudo Command Group:\n"
"   ipa sudocmdgroup-del admincmds\n"
"\n"
" Manage Sudo Command Group membership, commands:\n"
"   ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/"
"vim admincmds\n"
"\n"
" Manage Sudo Command Group membership, commands:\n"
"   ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n"
"\n"
" Show a Sudo Command Group:\n"
"   ipa group-show localadmins\n"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:59
msgid "sudo command group"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:60
msgid "sudo command groups"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:111 ipalib/plugins/sudocmdgroup.py:116
msgid "Sudo Command Group"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:139
msgid "Create new Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:141
#, python-format
msgid "Added Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:147
msgid "Delete Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:149
#, python-format
msgid "Deleted Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:155
msgid "Modify Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:157
#, python-format
msgid "Modified Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:163
msgid "Search for Sudo Command Groups."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:166
#, python-format
msgid "%(count)d Sudo Command Group matched"
msgid_plural "%(count)d Sudo Command Groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudocmdgroup.py:174
msgid "Display Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:180
msgid "Add members to Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:186
msgid "Remove members from Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudorule.py:38
msgid ""
"\n"
"Sudo Rules\n"
msgstr ""

#: ipalib/plugins/sudorule.py:40
msgid ""
"\n"
"Sudo (su \"do\") allows a system administrator to delegate authority to\n"
"give certain users (or groups of users) the ability to run some (or all)\n"
"commands as root or another user while providing an audit trail of the\n"
"commands and their arguments.\n"
msgstr ""

#: ipalib/plugins/sudorule.py:45
msgid ""
"\n"
"FreeIPA provides a means to configure the various aspects of Sudo:\n"
"   Users: The user(s)/group(s) allowed to invoke Sudo.\n"
"   Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke "
"Sudo.\n"
"   Allow Command: The specific command(s) permitted to be run via Sudo.\n"
"   Deny Command: The specific command(s) prohibited to be run via Sudo.\n"
"   RunAsUser: The user(s) or group(s) of users whose rights Sudo will be "
"invoked with.\n"
"   RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n"
"   Options: The various Sudoers Options that can modify Sudo's behavior.\n"
msgstr ""

#: ipalib/plugins/sudorule.py:54
msgid ""
"\n"
"An order can be added to a sudorule to control the order in which they\n"
"are evaluated (if the client supports it). This order is an integer and\n"
"must be unique.\n"
msgstr ""

#: ipalib/plugins/sudorule.py:58
msgid ""
"\n"
"FreeIPA provides a designated binddn to use with Sudo located at:\n"
"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n"
msgstr ""

#: ipalib/plugins/sudorule.py:61
msgid ""
"\n"
"To enable the binddn run the following command to set the password:\n"
"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -"
"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example,"
"dc=com\n"
msgstr ""

#: ipalib/plugins/sudorule.py:68
msgid ""
"\n"
" Create a new rule:\n"
"   ipa sudorule-add readfiles\n"
msgstr ""

#: ipalib/plugins/sudorule.py:71
msgid ""
"\n"
" Add sudo command object and add it as allowed command in the rule:\n"
"   ipa sudocmd-add /usr/bin/less\n"
"   ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n"
msgstr ""

#: ipalib/plugins/sudorule.py:75
msgid ""
"\n"
" Add a host to the rule:\n"
"   ipa sudorule-add-host readfiles --hosts server.example.com\n"
msgstr ""

#: ipalib/plugins/sudorule.py:78
msgid ""
"\n"
" Add a user to the rule:\n"
"   ipa sudorule-add-user readfiles --users jsmith\n"
msgstr ""

#: ipalib/plugins/sudorule.py:81
msgid ""
"\n"
" Add a special Sudo rule for default Sudo server configuration:\n"
"   ipa sudorule-add defaults\n"
msgstr ""

#: ipalib/plugins/sudorule.py:84
msgid ""
"\n"
" Set a default Sudo option:\n"
"   ipa sudorule-add-option defaults --sudooption '!authenticate'\n"
msgstr ""

#: ipalib/plugins/sudorule.py:91
msgid "Commands for controlling sudo configuration"
msgstr ""

#: ipalib/plugins/sudorule.py:97
msgid "this option has been deprecated."
msgstr ""

#: ipalib/plugins/sudorule.py:101
msgid "host masks of allowed hosts"
msgstr ""

#: ipalib/plugins/sudorule.py:124
msgid "sudo rule"
msgstr ""

#: ipalib/plugins/sudorule.py:125
msgid "sudo rules"
msgstr ""

#: ipalib/plugins/sudorule.py:212
msgid "Sudo Rules"
msgstr ""

#: ipalib/plugins/sudorule.py:213
msgid "Sudo Rule"
msgstr ""

#: ipalib/plugins/sudorule.py:243
msgid "Command category"
msgstr ""

#: ipalib/plugins/sudorule.py:244
msgid "Command category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:249
msgid "RunAs User category"
msgstr ""

#: ipalib/plugins/sudorule.py:250
msgid "RunAs User category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:255
msgid "RunAs Group category"
msgstr ""

#: ipalib/plugins/sudorule.py:256
msgid "RunAs Group category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:261
msgid "Sudo order"
msgstr ""

#: ipalib/plugins/sudorule.py:262
msgid "integer to order the Sudo rules"
msgstr ""

#: ipalib/plugins/sudorule.py:276
msgid "External User"
msgstr ""

#: ipalib/plugins/sudorule.py:277
msgid "External User the rule applies to (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:289
msgid "Host Masks"
msgstr ""

#: ipalib/plugins/sudorule.py:295
msgid "Sudo Allow Commands"
msgstr ""

#: ipalib/plugins/sudorule.py:299
msgid "Sudo Deny Commands"
msgstr ""

#: ipalib/plugins/sudorule.py:303
msgid "Sudo Allow Command Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:307
msgid "Sudo Deny Command Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:311
msgid "RunAs Users"
msgstr ""

#: ipalib/plugins/sudorule.py:312
msgid "Run as a user"
msgstr ""

#: ipalib/plugins/sudorule.py:316
msgid "Groups of RunAs Users"
msgstr ""

#: ipalib/plugins/sudorule.py:317
msgid "Run as any user within a specified group"
msgstr ""

#: ipalib/plugins/sudorule.py:322
msgid "RunAs External User"
msgstr ""

#: ipalib/plugins/sudorule.py:323
msgid "External User the commands can run as (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:327
msgid "External Groups of RunAs Users"
msgstr ""

#: ipalib/plugins/sudorule.py:328
msgid "External Groups of users that the command can run as"
msgstr ""

#: ipalib/plugins/sudorule.py:332
msgid "RunAs Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:333
msgid "Run with the gid of a specified POSIX group"
msgstr ""

#: ipalib/plugins/sudorule.py:338
msgid "RunAs External Group"
msgstr ""

#: ipalib/plugins/sudorule.py:339
msgid "External Group the commands can run as (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:342 ipalib/plugins/sudorule.py:915
#: ipalib/plugins/sudorule.py:968
msgid "Sudo Option"
msgstr ""

#: ipalib/plugins/sudorule.py:348
#, python-format
msgid "order must be a unique value (%(order)d already used by %(rule)s)"
msgstr ""

#: ipalib/plugins/sudorule.py:370
msgid "Create new Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:379
#, python-format
msgid "Added Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:384
msgid "Delete Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:386
#, python-format
msgid "Deleted Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:391
msgid "Modify Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:393
#, python-format
msgid "Modified Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:413
#, python-format
msgid ""
"%(type)s category cannot be set to 'all' while there are allowed %(objects)s"
msgstr ""

#: ipalib/plugins/sudorule.py:419 ipalib/plugins/user.py:228
msgid "user"
msgstr ""

#: ipalib/plugins/sudorule.py:419 ipalib/plugins/user.py:229
msgid "users"
msgstr ""

#: ipalib/plugins/sudorule.py:429
msgid "command"
msgstr ""

#: ipalib/plugins/sudorule.py:429
msgid "commands"
msgstr ""

#: ipalib/plugins/sudorule.py:435
msgid "runAs user"
msgstr ""

#: ipalib/plugins/sudorule.py:435
msgid "runAs users"
msgstr ""

#: ipalib/plugins/sudorule.py:440
msgid "group runAs"
msgstr ""

#: ipalib/plugins/sudorule.py:440
msgid "runAs groups"
msgstr ""

#: ipalib/plugins/sudorule.py:458
msgid "Search for Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:461
#, python-format
msgid "%(count)d Sudo Rule matched"
msgid_plural "%(count)d Sudo Rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudorule.py:467
msgid "Display Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:472
msgid "Enable a Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:493
#, python-format
msgid "Enabled Sudo Rule \"%s\""
msgstr ""

#: ipalib/plugins/sudorule.py:498
msgid "Disable a Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:519
#, python-format
msgid "Disabled Sudo Rule \"%s\""
msgstr ""

#: ipalib/plugins/sudorule.py:524 ipalib/plugins/sudorule.py:555
msgid "Add commands and sudo command groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:539
msgid "commands cannot be added when command category='all'"
msgstr ""

#: ipalib/plugins/sudorule.py:547 ipalib/plugins/sudorule.py:567
msgid "Remove commands and sudo command groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:575
msgid "Add users and groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:607
msgid "Remove users and groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:625
msgid "Add hosts and hostgroups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:682
msgid "Remove hosts and hostgroups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:727
msgid "Add users and groups for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:750 ipalib/plugins/sudorule.py:863
msgid "users cannot be added when runAs user or runAs group category='all'"
msgstr ""

#: ipalib/plugins/sudorule.py:757
#, python-format
msgid "RunAsUser does not accept '%(name)s' as a user name"
msgstr ""

#: ipalib/plugins/sudorule.py:765
#, python-format
msgid "RunAsUser does not accept '%(name)s' as a group name"
msgstr ""

#: ipalib/plugins/sudorule.py:804
msgid "Remove users and groups for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:842
msgid "Add group for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:870
#, python-format
msgid "RunAsGroup does not accept '%(name)s' as a group name"
msgstr ""

#: ipalib/plugins/sudorule.py:890
msgid "Remove group for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:909
msgid "Add an option to the Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:953
#, python-format
msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:962
msgid "Remove an option from Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:1011
#, python-format
msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\""
msgstr ""

#: ipalib/plugins/trust.py:50
msgid ""
"\n"
"Cross-realm trusts\n"
"\n"
"Manage trust relationship between IPA and Active Directory domains.\n"
"\n"
"In order to allow users from a remote domain to access resources in IPA\n"
"domain, trust relationship needs to be established. Currently IPA supports\n"
"only trusts between IPA and Active Directory domains under control of "
"Windows\n"
"Server 2008 or later, with functional level 2008 or later.\n"
"\n"
"Please note that DNS on both IPA and Active Directory domain sides should "
"be\n"
"configured properly to discover each other. Trust relationship relies on\n"
"ability to discover special resources in the other domain via DNS records.\n"
"\n"
"Examples:\n"
"\n"
"1. Establish cross-realm trust with Active Directory using AD administrator\n"
"   credentials:\n"
"\n"
"   ipa trust-add --type=ad <ad.domain> --admin <AD domain administrator> --"
"password\n"
"\n"
"2. List all existing trust relationships:\n"
"\n"
"   ipa trust-find\n"
"\n"
"3. Show details of the specific trust relationship:\n"
"\n"
"   ipa trust-show <ad.domain>\n"
"\n"
"4. Delete existing trust relationship:\n"
"\n"
"   ipa trust-del <ad.domain>\n"
"\n"
"Once trust relationship is established, remote users will need to be mapped\n"
"to local POSIX groups in order to actually use IPA resources. The mapping "
"should\n"
"be done via use of external membership of non-POSIX group and then this "
"group\n"
"should be included into one of local POSIX groups.\n"
"\n"
"Example:\n"
"\n"
"1. Create group for the trusted domain admins' mapping and their local POSIX "
"group:\n"
"\n"
"   ipa group-add --desc='<ad.domain> admins external map' ad_admins_external "
"--external\n"
"   ipa group-add --desc='<ad.domain> admins' ad_admins\n"
"\n"
"2. Add security identifier of Domain Admins of the <ad.domain> to the "
"ad_admins_external\n"
"   group:\n"
"\n"
"   ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n"
"\n"
"3. Allow members of ad_admins_external group to be associated with ad_admins "
"POSIX group:\n"
"\n"
"   ipa group-add-member ad_admins --groups ad_admins_external\n"
"\n"
"4. List members of external members of ad_admins_external group to see their "
"SIDs:\n"
"\n"
"   ipa group-show ad_admins_external\n"
"\n"
"\n"
"GLOBAL TRUST CONFIGURATION\n"
"\n"
"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n"
"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n"
"identifiers are then used when communicating with a trusted domain of the\n"
"particular type.\n"
"\n"
"1. Show global trust configuration for Active Directory type of trusts:\n"
"\n"
"   ipa trustconfig-show --type ad\n"
"\n"
"2. Modify global configuration for all trusts of Active Directory type and "
"set\n"
"   a different fallback primary group (fallback primary group GID is used "
"as\n"
"   a primary user GID if user authenticating to IPA domain does not have any "
"other\n"
"   primary GID already set):\n"
"\n"
"   ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD "
"group\"\n"
"\n"
"3. Change primary fallback group back to default hidden group (any group "
"with\n"
"   posixGroup object class is allowed):\n"
"\n"
"   ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group"
"\"\n"
msgstr ""

#: ipalib/plugins/trust.py:144
msgid "Non-Active Directory domain"
msgstr ""

#: ipalib/plugins/trust.py:146
msgid "RFC4120-compliant Kerberos realm"
msgstr ""

#: ipalib/plugins/trust.py:147
msgid "Trusting forest"
msgstr ""

#: ipalib/plugins/trust.py:148
msgid "Trusted forest"
msgstr ""

#: ipalib/plugins/trust.py:149
msgid "Two-way trust"
msgstr ""

#: ipalib/plugins/trust.py:150
msgid "Established and verified"
msgstr ""

#: ipalib/plugins/trust.py:151
msgid "Waiting for confirmation by remote side"
msgstr ""

#: ipalib/plugins/trust.py:152
msgid "Unknown"
msgstr ""

#: ipalib/plugins/trust.py:156
msgid "Trust type (ad for Active Directory, default)"
msgstr ""

#: ipalib/plugins/trust.py:309
msgid "trust"
msgstr ""

#: ipalib/plugins/trust.py:310
msgid "trusts"
msgstr ""

#: ipalib/plugins/trust.py:347
msgid "Trust"
msgstr ""

#: ipalib/plugins/trust.py:352 ipa-client/ipa-rmkeytab.c:176
msgid "Realm name"
msgstr ""

#: ipalib/plugins/trust.py:366
msgid "SID blacklist incoming"
msgstr ""

#: ipalib/plugins/trust.py:371
msgid "SID blacklist outgoing"
msgstr ""

#: ipalib/plugins/trust.py:388
#, python-format
msgid "invalid SID: %(value)s"
msgstr ""

#: ipalib/plugins/trust.py:410
msgid ""
"\n"
"Add new trust to use.\n"
"\n"
"This command establishes trust relationship to another domain\n"
"which becomes 'trusted'. As result, users of the trusted domain\n"
"may access resources of this domain.\n"
"\n"
"Only trusts to Active Directory domains are supported right now.\n"
"\n"
"The command can be safely run multiple times against the same domain,\n"
"this will cause change to trust relationship credentials on both\n"
"sides.\n"
"    "
msgstr ""

#: ipalib/plugins/trust.py:434
msgid "Active Directory domain administrator"
msgstr ""

#: ipalib/plugins/trust.py:438
msgid "Active directory domain administrator's password"
msgstr ""

#: ipalib/plugins/trust.py:443
msgid "Domain controller for the Active Directory domain (optional)"
msgstr ""

#: ipalib/plugins/trust.py:447
msgid "Shared secret for the trust"
msgstr ""

#: ipalib/plugins/trust.py:452
msgid "First Posix ID of the range reserved for the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:456
msgid "Size of the ID range reserved for the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:461
#, python-brace-format
msgid "Type of trusted domain ID range, one of {vals}"
msgstr ""

#: ipalib/plugins/trust.py:467
#, python-format
msgid "Added Active Directory trust for realm \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:468
#, python-format
msgid "Re-established trust to domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:517 ipalib/plugins/trust.py:559
#: ipalib/plugins/trust.py:579 ipalib/plugins/trust.py:589
#: ipalib/plugins/trust.py:711 ipalib/plugins/trust.py:743
#: ipalib/plugins/trust.py:1320 ipalib/plugins/trust.py:1332
msgid "AD Trust setup"
msgstr ""

#: ipalib/plugins/trust.py:519 ipalib/plugins/trust.py:1322
msgid ""
"Cannot perform join operation without Samba 4 support installed. Make sure "
"you have installed server-trust-ad sub-package of IPA"
msgstr ""

#: ipalib/plugins/trust.py:527
msgid "missing base_id"
msgstr ""

#: ipalib/plugins/trust.py:529
msgid "pysss_murmur is not available on the server and no base-id is given."
msgstr ""

#: ipalib/plugins/trust.py:535 ipalib/plugins/trust.py:539
msgid "trust type"
msgstr ""

#: ipalib/plugins/trust.py:540
msgid "only \"ad\" is supported"
msgstr ""

#: ipalib/plugins/trust.py:550
msgid "Realm-domain mismatch"
msgstr ""

#: ipalib/plugins/trust.py:551
msgid ""
"To establish trust with Active Directory, the domain name and the realm name "
"of the IPA server must match"
msgstr ""

#: ipalib/plugins/trust.py:581
msgid "Trusted domain and administrator account use different realms"
msgstr ""

#: ipalib/plugins/trust.py:590
msgid "Realm administrator password should be specified"
msgstr ""

#: ipalib/plugins/trust.py:611
msgid "id range type"
msgstr ""

#: ipalib/plugins/trust.py:613
msgid ""
"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-"
"type when adding an AD trust."
msgstr ""

#: ipalib/plugins/trust.py:623
msgid "id range"
msgstr ""

#: ipalib/plugins/trust.py:625
msgid ""
"An id range already exists for this trust. You should either delete the old "
"range, or exclude --base-id/--range-size options from the command."
msgstr ""

#: ipalib/plugins/trust.py:647
msgid "range exists"
msgstr ""

#: ipalib/plugins/trust.py:649
msgid ""
"ID range with the same name but different domain SID already exists. The ID "
"range for the new trusted domain must be created manually."
msgstr ""

#: ipalib/plugins/trust.py:656
msgid "range type change"
msgstr ""

#: ipalib/plugins/trust.py:657
msgid ""
"ID range for the trusted domain already exists, but it has a different type. "
"Please remove the old range manually, or do not enforce type via --range-"
"type option."
msgstr ""

#: ipalib/plugins/trust.py:686
#, python-format
msgid "Unable to resolve domain controller for '%s' domain. "
msgstr ""

#: ipalib/plugins/trust.py:692
msgid ""
"Forward policy is defined for it in IPA DNS, perhaps forwarder points to "
"incorrect host?"
msgstr ""

#: ipalib/plugins/trust.py:695
#, python-format
msgid ""
"IPA manages DNS, please verify your DNS configuration and make sure that "
"service records of the '%(domain)s' domain can be resolved. Examples how to "
"configure DNS with CLI commands or the Web UI can be found in the "
"documentation. "
msgstr ""

#: ipalib/plugins/trust.py:705
#, python-format
msgid ""
"Since IPA does not manage DNS records, ensure DNS is configured to resolve "
"'%(domain)s' domain from IPA hosts and back."
msgstr ""

#: ipalib/plugins/trust.py:712
msgid "Unable to verify write permissions to the AD"
msgstr ""

#: ipalib/plugins/trust.py:744
msgid "Not enough arguments specified to perform trust setup"
msgstr ""

#: ipalib/plugins/trust.py:748
msgid "Delete a trust."
msgstr ""

#: ipalib/plugins/trust.py:750
#, python-format
msgid "Deleted trust \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:754
msgid ""
"\n"
"    Modify a trust (for future use).\n"
"\n"
"    Currently only the default option to modify the LDAP attributes is\n"
"    available. More specific options will be added in coming releases.\n"
"    "
msgstr ""

#: ipalib/plugins/trust.py:761
#, python-format
msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)"
msgstr ""

#: ipalib/plugins/trust.py:773
msgid "Search for trusts."
msgstr ""

#: ipalib/plugins/trust.py:778
#, python-format
msgid "%(count)d trust matched"
msgid_plural "%(count)d trusts matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/trust.py:804
msgid "Display information about a trust."
msgstr ""

#: ipalib/plugins/trust.py:839
msgid "trust configuration"
msgstr ""

#: ipalib/plugins/trust.py:845 ipalib/plugins/trust.py:846
msgid "Global Trust Configuration"
msgstr ""

#: ipalib/plugins/trust.py:854
msgid "Security Identifier"
msgstr ""

#: ipalib/plugins/trust.py:858
msgid "NetBIOS name"
msgstr ""

#: ipalib/plugins/trust.py:862
msgid "Domain GUID"
msgstr ""

#: ipalib/plugins/trust.py:867
msgid "Fallback primary group"
msgstr ""

#: ipalib/plugins/trust.py:879
msgid "unsupported trust type"
msgstr ""

#: ipalib/plugins/trust.py:942
msgid "Modify global trust configuration."
msgstr ""

#: ipalib/plugins/trust.py:945
#, python-format
msgid "Modified \"%(value)s\" trust configuration"
msgstr ""

#: ipalib/plugins/trust.py:964
msgid "Show global trust configuration."
msgstr ""

#: ipalib/plugins/trust.py:991
msgid "Resolve security identifiers of users and groups in trusted domains"
msgstr ""

#: ipalib/plugins/trust.py:995
msgid "Security Identifiers (SIDs)"
msgstr ""

#: ipalib/plugins/trust.py:1001
msgid "Name"
msgstr ""

#: ipalib/plugins/trust.py:1002
msgid "SID"
msgstr ""

#: ipalib/plugins/trust.py:1033
msgid "Determine whether ipa-adtrust-install has been run on this system"
msgstr ""

#: ipalib/plugins/trust.py:1060
msgid ""
"Determine whether Schema Compatibility plugin is configured to serve trusted "
"domain users and groups"
msgstr ""

#: ipalib/plugins/trust.py:1113
msgid "Determine whether ipa-adtrust-install has been run with sidgen task"
msgstr ""

#: ipalib/plugins/trust.py:1129
msgid "sidgen_was_run"
msgstr ""

#: ipalib/plugins/trust.py:1131
msgid ""
"This command relies on the existence of the \"editors\" group, but this "
"group was not found."
msgstr ""

#: ipalib/plugins/trust.py:1150
msgid "trust domain"
msgstr ""

#: ipalib/plugins/trust.py:1151
msgid "trust domains"
msgstr ""

#: ipalib/plugins/trust.py:1156
msgid "Trusted domains"
msgstr ""

#: ipalib/plugins/trust.py:1157
msgid "Trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:1161
msgid "Domain name"
msgstr ""

#: ipalib/plugins/trust.py:1174
msgid "Trusted domain partner"
msgstr ""

#: ipalib/plugins/trust.py:1194
msgid "Search domains of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1197
msgid "Domain enabled"
msgstr ""

#: ipalib/plugins/trust.py:1224
msgid "Modify trustdomain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1231
msgid "Allow access from the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:1242
msgid "Remove infromation about the domain associated with the trust."
msgstr ""

#: ipalib/plugins/trust.py:1244
#, python-format
msgid "Removed information about the trusted domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1253
msgid ""
"cannot delete root domain of the trust, use trust-del to delete the trust "
"itself"
msgstr ""

#: ipalib/plugins/trust.py:1313
msgid "Refresh list of the domains associated with the trust"
msgstr ""

#: ipalib/plugins/trust.py:1343
msgid "List of trust domains successfully refreshed"
msgstr ""

#: ipalib/plugins/trust.py:1345
msgid "No new trust domains were found"
msgstr ""

#: ipalib/plugins/trust.py:1355
msgid "Allow use of IPA resources by the domain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1358
#, python-format
msgid "Enabled trust domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1365
msgid "Root domain of the trust is always enabled for the existing trust"
msgstr ""

#: ipalib/plugins/trust.py:1395
msgid "Disable use of IPA resources by the domain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1398
#, python-format
msgid "Disabled trust domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1405
msgid ""
"cannot disable root domain of the trust, use trust-del to delete the trust "
"itself"
msgstr ""

#: ipalib/plugins/user.py:43
msgid ""
"\n"
"Users\n"
"\n"
"Manage user entries. All users are POSIX users.\n"
"\n"
"IPA supports a wide range of username formats, but you need to be aware of "
"any\n"
"restrictions that may apply to your particular environment. For example,\n"
"usernames that start with a digit or usernames that exceed a certain length\n"
"may cause problems for some UNIX systems.\n"
"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n"
"\n"
"Disabling a user account prevents that user from obtaining new Kerberos\n"
"credentials. It does not invalidate any credentials that have already\n"
"been issued.\n"
"\n"
"Password management is not a part of this module. For more information\n"
"about this topic please see: ipa help passwd\n"
"\n"
"Account lockout on password failure happens per IPA master. The user-status\n"
"command can be used to identify which master the user is locked out on.\n"
"It is on that master the administrator must unlock the user.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new user:\n"
"   ipa user-add --first=Tim --last=User --password tuser1\n"
"\n"
" Find all users whose entries include the string \"Tim\":\n"
"   ipa user-find Tim\n"
"\n"
" Find all users with \"Tim\" as the first name:\n"
"   ipa user-find --first=Tim\n"
"\n"
" Disable a user account:\n"
"   ipa user-disable tuser1\n"
"\n"
" Enable a user account:\n"
"   ipa user-enable tuser1\n"
"\n"
" Delete a user:\n"
"   ipa user-del tuser1\n"
msgstr ""

#: ipalib/plugins/user.py:92
msgid "Kerberos keys available"
msgstr ""

#: ipalib/plugins/user.py:104
msgid "Failed logins"
msgstr ""

#: ipalib/plugins/user.py:107
msgid "Last successful authentication"
msgstr ""

#: ipalib/plugins/user.py:110
msgid "Last failed authentication"
msgstr ""

#: ipalib/plugins/user.py:113
msgid "Time now"
msgstr ""

#: ipalib/plugins/user.py:134
msgid "must be TRUE or FALSE"
msgstr ""

#: ipalib/plugins/user.py:438
msgid "User login"
msgstr ""

#: ipalib/plugins/user.py:445
msgid "First name"
msgstr ""

#: ipalib/plugins/user.py:449
msgid "Last name"
msgstr ""

#: ipalib/plugins/user.py:452
msgid "Full name"
msgstr ""

#: ipalib/plugins/user.py:457
msgid "Display name"
msgstr ""

#: ipalib/plugins/user.py:462
msgid "Initials"
msgstr ""

#: ipalib/plugins/user.py:468
msgid "Home directory"
msgstr ""

#: ipalib/plugins/user.py:471
msgid "GECOS"
msgstr ""

#: ipalib/plugins/user.py:477
msgid "Login shell"
msgstr ""

#: ipalib/plugins/user.py:481
msgid "Kerberos principal"
msgstr ""

#: ipalib/plugins/user.py:489
msgid "Kerberos principal expiration"
msgstr ""

#: ipalib/plugins/user.py:493
msgid "Email address"
msgstr ""

#: ipalib/plugins/user.py:498
msgid "Prompt to set the user password"
msgstr ""

#: ipalib/plugins/user.py:504
msgid "Generate a random user password"
msgstr ""

#: ipalib/plugins/user.py:514
msgid "UID"
msgstr ""

#: ipalib/plugins/user.py:515
msgid "User ID Number (system will assign one if not provided)"
msgstr ""

#: ipalib/plugins/user.py:520
msgid "Group ID Number"
msgstr ""

#: ipalib/plugins/user.py:525
msgid "Street address"
msgstr ""

#: ipalib/plugins/user.py:529
msgid "City"
msgstr ""

#: ipalib/plugins/user.py:533
msgid "State/Province"
msgstr ""

#: ipalib/plugins/user.py:536
msgid "ZIP"
msgstr ""

#: ipalib/plugins/user.py:540
msgid "Telephone Number"
msgstr ""

#: ipalib/plugins/user.py:543
msgid "Mobile Telephone Number"
msgstr ""

#: ipalib/plugins/user.py:546
msgid "Pager Number"
msgstr ""

#: ipalib/plugins/user.py:550
msgid "Fax Number"
msgstr ""

#: ipalib/plugins/user.py:554
msgid "Org. Unit"
msgstr ""

#: ipalib/plugins/user.py:557
msgid "Job Title"
msgstr ""

#: ipalib/plugins/user.py:563
msgid "Car License"
msgstr ""

#: ipalib/plugins/user.py:566
msgid "Account disabled"
msgstr ""

#: ipalib/plugins/user.py:578
msgid "User authentication types"
msgstr ""

#: ipalib/plugins/user.py:579
msgid "Types of supported user authentication"
msgstr ""

#: ipalib/plugins/user.py:586
msgid ""
"User category (semantics placed on this attribute are for local "
"interpretation)"
msgstr ""

#: ipalib/plugins/user.py:591
msgid "RADIUS proxy configuration"
msgstr ""

#: ipalib/plugins/user.py:595
msgid "RADIUS proxy username"
msgstr ""

#: ipalib/plugins/user.py:598
msgid "Department Number"
msgstr ""

#: ipalib/plugins/user.py:601
msgid "Employee Number"
msgstr ""

#: ipalib/plugins/user.py:604
msgid "Employee Type"
msgstr ""

#: ipalib/plugins/user.py:607
msgid "Preferred Language"
msgstr ""

#: ipalib/plugins/user.py:629 ipalib/plugins/user.py:633
#, python-format
msgid "invalid e-mail format: %(email)s"
msgstr ""

#: ipalib/plugins/user.py:659
#, python-format
msgid "manager %(manager)s not found"
msgstr ""

#: ipalib/plugins/user.py:677
msgid "Add a new user."
msgstr ""

#: ipalib/plugins/user.py:679
#, python-format
msgid "Added user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:686
msgid "Don't create user private group"
msgstr ""

#: ipalib/plugins/user.py:730 ipalib/plugins/user.py:891
#, python-format
msgid "can be at most %(len)d characters"
msgstr ""

#: ipalib/plugins/user.py:762
msgid "Default group for new users is not POSIX"
msgstr ""

#: ipalib/plugins/user.py:852
msgid "Delete a user."
msgstr ""

#: ipalib/plugins/user.py:854
#, python-format
msgid "Deleted user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:877
msgid "Modify a user."
msgstr ""

#: ipalib/plugins/user.py:879
#, python-format
msgid "Modified user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:950
msgid "Search for users."
msgstr ""

#: ipalib/plugins/user.py:957
msgid "Self"
msgstr ""

#: ipalib/plugins/user.py:958
msgid "Display user record for current Kerberos principal"
msgstr ""

#: ipalib/plugins/user.py:994
#, python-format
msgid "%(count)d user matched"
msgid_plural "%(count)d users matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/user.py:1000
msgid "Display information about a user."
msgstr ""

#: ipalib/plugins/user.py:1016
msgid "Disable a user account."
msgstr ""

#: ipalib/plugins/user.py:1019
#, python-format
msgid "Disabled user account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:1037
msgid "Enable a user account."
msgstr ""

#: ipalib/plugins/user.py:1041
#, python-format
msgid "Enabled user account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:1058
msgid ""
"\n"
"    Unlock a user account\n"
"\n"
"    An account may become locked if the password is entered incorrectly too\n"
"    many times within a specific time period as controlled by password\n"
"    policy. A locked account is a temporary condition and may be unlocked "
"by\n"
"    an administrator."
msgstr ""

#: ipalib/plugins/user.py:1067
#, python-format
msgid "Unlocked account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:1087
msgid ""
"\n"
"    Lockout status of a user account\n"
"\n"
"    An account may become locked if the password is entered incorrectly too\n"
"    many times within a specific time period as controlled by password\n"
"    policy. A locked account is a temporary condition and may be unlocked "
"by\n"
"    an administrator.\n"
"\n"
"    This connects to each IPA master and displays the lockout status on\n"
"    each one.\n"
"\n"
"    To determine whether an account is locked on a given server you need\n"
"    to compare the number of failed logins and the time of the last "
"failure.\n"
"    For an account to be locked it must exceed the maxfail failures within\n"
"    the failinterval duration as specified in the password policy "
"associated\n"
"    with the user.\n"
"\n"
"    The failed login counter is modified only when a user attempts a log in\n"
"    so it is possible that an account may appear locked but the last failed\n"
"    login attempt is older than the lockouttime of the password policy. "
"This\n"
"    means that the user may attempt a login again. "
msgstr ""

#: ipalib/plugins/user.py:1145
#, python-format
msgid "%(host)s failed: %(error)s"
msgstr ""

#: ipalib/plugins/user.py:1181
#, python-format
msgid "%(host)s failed"
msgstr ""

#: ipalib/plugins/user.py:1191
#, python-format
msgid "Account disabled: %(disabled)s"
msgstr ""

#: ipalib/plugins/virtual.py:52
msgid "operation not defined"
msgstr ""

#: ipalib/plugins/virtual.py:65
msgid "not allowed to perform this command"
msgstr ""

#: ipalib/plugins/virtual.py:67
msgid "No such virtual command"
msgstr ""

#: ipalib/rpc.py:839
msgid "any of the configured servers"
msgstr ""

#: ipalib/session.py:777 ipalib/session.py:880
msgid "could not allocate unique new session_id"
msgstr ""

#: ipalib/util.py:191
msgid "Filename is empty"
msgstr ""

#: ipalib/util.py:195
#, python-format
msgid "Permission denied: %(file)s"
msgstr ""

#: ipalib/util.py:243
msgid "DNS label cannot be longer that 63 characters"
msgstr ""

#: ipalib/util.py:248
#, python-format
msgid ""
"only letters, numbers, %(chars)s are allowed. DNS label may not start or end "
"with %(chars2)s"
msgstr ""

#: ipalib/util.py:268
msgid "too many '@' characters"
msgstr ""

#: ipalib/util.py:270
msgid "missing address domain"
msgstr ""

#: ipalib/util.py:272
msgid "missing mail account"
msgstr ""

#: ipalib/util.py:286
msgid "cannot be longer that 255 characters"
msgstr ""

#: ipalib/util.py:292
msgid "hostname contains empty label (consecutive dots)"
msgstr ""

#: ipalib/util.py:296
msgid "not fully qualified"
msgstr ""

#: ipalib/util.py:308 ipalib/util.py:314
msgid "invalid SSH public key"
msgstr ""

#: ipalib/util.py:317
msgid "options are not allowed"
msgstr ""

#: ipalib/util.py:553
msgid "invalid hostmask"
msgstr ""

#: ipalib/x509.py:208
msgid "improperly formatted DER-encoded certificate"
msgstr ""

#: ipalib/x509.py:245
#, python-format
msgid "Issuer \"%(issuer)s\" does not match the expected issuer"
msgstr ""

#: ipapython/dogtag.py:181
#, python-format
msgid "Retrieving CA cert chain failed: %s"
msgstr ""

#: ipapython/dogtag.py:187
#, python-format
msgid "request failed with HTTP status %d"
msgstr ""

#: ipapython/dogtag.py:214 ipapython/dogtag.py:221
#, python-format
msgid "Retrieving CA status failed: %s"
msgstr ""

#: ipapython/ipaldap.py:1237
#, python-format
msgid "objectclass %s not found"
msgstr ""

#: ipaserver/dcerpc.py:60
msgid ""
"\n"
"Classes to manage trust joins using DCE-RPC calls\n"
"\n"
"The code in this module relies heavily on samba4-python package\n"
"and Samba4 python bindings.\n"
msgstr ""

#: ipaserver/dcerpc.py:77
msgid "CIFS server denied your credentials"
msgstr ""

#: ipaserver/dcerpc.py:80
msgid "communication with CIFS server was unsuccessful"
msgstr ""

#: ipaserver/dcerpc.py:85
msgid "AD domain controller"
msgstr ""

#: ipaserver/dcerpc.py:85
msgid "unsupported functional level"
msgstr ""

#: ipaserver/dcerpc.py:88
msgid ""
"AD domain controller complains about communication sequence. It may mean "
"unsynchronized time on both sides, for example"
msgstr ""

#: ipaserver/dcerpc.py:93
msgid "Cannot find specified domain or server name"
msgstr ""

#: ipaserver/dcerpc.py:95
msgid "At least the domain or IP address should be specified"
msgstr ""

#: ipaserver/dcerpc.py:107
#, python-format
msgid ""
"CIFS server communication error: code \"%(num)s\",\n"
"                  message \"%(message)s\" (both may be \"None\")"
msgstr ""

#: ipaserver/dcerpc.py:207
msgid "no trusted domain is configured"
msgstr ""

#: ipaserver/dcerpc.py:214
msgid "domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:221
msgid "SID is not valid"
msgstr ""

#: ipaserver/dcerpc.py:236
msgid "SID does not match exactlywith any trusted domain's SID"
msgstr ""

#: ipaserver/dcerpc.py:247
msgid "SID does not match any trusted domain"
msgstr ""

#: ipaserver/dcerpc.py:287 ipaserver/dcerpc.py:293 ipaserver/dcerpc.py:515
msgid "Trust setup"
msgstr ""

#: ipaserver/dcerpc.py:288
msgid "Our domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:294
msgid "No trusted domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:299 ipaserver/dcerpc.py:314 ipaserver/dcerpc.py:331
#: ipaserver/dcerpc.py:343 ipaserver/dcerpc.py:350 ipaserver/dcerpc.py:395
msgid "trusted domain object"
msgstr ""

#: ipaserver/dcerpc.py:300
msgid "domain is not trusted"
msgstr ""

#: ipaserver/dcerpc.py:315
msgid "no trusted domain matched the specified flat name"
msgstr ""

#: ipaserver/dcerpc.py:317
msgid "trusted domain object not found"
msgstr ""

#: ipaserver/dcerpc.py:332 ipaserver/dcerpc.py:396
msgid "Ambiguous search, user domain was not specified"
msgstr ""

#: ipaserver/dcerpc.py:344
msgid "Trusted domain did not return a unique object"
msgstr ""

#: ipaserver/dcerpc.py:351
msgid "Trusted domain did not return a valid SID for the object"
msgstr ""

#: ipaserver/dcerpc.py:381 ipaserver/dcerpc.py:391
msgid "trusted domain user not found"
msgstr ""

#: ipaserver/dcerpc.py:516
msgid "Cannot retrieve trusted domain GC list"
msgstr ""

#: ipaserver/dcerpc.py:652
msgid "CIFS credentials object"
msgstr ""

#: ipaserver/dcerpc.py:685
#, python-format
msgid "CIFS server %(host)s denied your credentials"
msgstr ""

#: ipaserver/dcerpc.py:689
#, python-format
msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?"
msgstr ""

#: ipaserver/dcerpc.py:878
#, python-format
msgid ""
"the IPA server and the remote domain cannot share the same NetBIOS name: %s"
msgstr ""

#: ipaserver/install/certs.py:641
#, python-format
msgid "Unable to communicate with CMS (%s)"
msgstr ""

#: ipaserver/plugins/dogtag.py:1253
msgid "Unable to communicate with CMS"
msgstr ""

#: ipaserver/plugins/dogtag.py:1833
msgid "find not supported on CAs upgraded from 9 to 10"
msgstr ""

#: ipaserver/plugins/join.py:59
msgid "The hostname to register as"
msgstr ""

#: ipaserver/plugins/join.py:68
msgid "The IPA realm"
msgstr ""

#: ipaserver/plugins/join.py:74
msgid "Hardware platform of the host (e.g. Lenovo T61)"
msgstr ""

#: ipaserver/plugins/join.py:78
msgid "Operating System and version of the host (e.g. Fedora 9)"
msgstr ""

#: ipaserver/plugins/join.py:118
#, python-format
msgid ""
"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry "
"'%s'."
msgstr ""

#: ipaserver/plugins/ldap2.py:323
msgid "Could not read UPG Definition originfilter. Check your permissions."
msgstr ""

#: ipaserver/rpcserver.py:475
msgid "Request must be a dict"
msgstr ""

#: ipaserver/rpcserver.py:477
msgid "Request is missing \"method\""
msgstr ""

#: ipaserver/rpcserver.py:479
msgid "Request is missing \"params\""
msgstr ""

#: ipaserver/rpcserver.py:485
msgid "params must be a list"
msgstr ""

#: ipaserver/rpcserver.py:487
msgid "params must contain [args, options]"
msgstr ""

#: ipaserver/rpcserver.py:490
msgid "params[0] (aka args) must be a list"
msgstr ""

#: ipaserver/rpcserver.py:493
msgid "params[1] (aka options) must be a dict"
msgstr ""

#: ipa-client/config.c:56
#, c-format
msgid "cannot open configuration file %s\n"
msgstr ""

#: ipa-client/config.c:63
#, c-format
msgid "cannot stat() configuration file %s\n"
msgstr ""

#: ipa-client/config.c:69
#, c-format
msgid "out of memory\n"
msgstr ""

#: ipa-client/config.c:80
#, c-format
msgid "read error\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:62
#, c-format
msgid "Kerberos context initialization failed: %1$s (%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:73
#, c-format
msgid "Unable to parse principal: %1$s (%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:128
#, c-format
msgid "No keys accepted by KDC\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:143
#, c-format
msgid "Out of memory \n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:169
#, c-format
msgid "Unable to set LDAP_OPT_X_TLS_CERTIFICATE\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:175
#, c-format
msgid "Unable to init for ldaps(636) connection\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:182
#, c-format
msgid "Unable to set LDAP_OPT_X_TLS\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:188
#, c-format
msgid "Unable to init for ldap(389) connection\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:194
#, c-format
msgid "Unable to initialize ldap library!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:202 ipa-client/ipa-join.c:240
#, c-format
msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:210
#, c-format
msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:221
#, c-format
msgid "Simple bind failed\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:264
#, c-format
msgid "Operation failed! %s\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:273
#, c-format
msgid "Failed to get result! %s\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:279
#, c-format
msgid "Failed to parse extended result! %s\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:286
#, c-format
msgid "Failed to parse result! %s\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:304
#, c-format
msgid "Missing reply control list!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:314
#, c-format
msgid "Missing reply control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:342
#, c-format
msgid "Out of Memory!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:349 ipa-client/ipa-getkeytab.c:595
#, c-format
msgid "Failed to create control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:355 ipa-client/ipa-getkeytab.c:602
#, c-format
msgid "Failed to bind to server!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:362
#, c-format
msgid "Failed to get keytab!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:371
#, c-format
msgid "ber_init() failed, Invalid control ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:390
#, c-format
msgid "ber_scanf() failed, unable to find kvno ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:402
#, c-format
msgid "Failed to retrieve encryption type type #%d\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:406
#, c-format
msgid "Failed to retrieve encryption type %1$s (#%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:416
#, c-format
msgid "Failed to retrieve any keys"
msgstr ""

#: ipa-client/ipa-getkeytab.c:614
msgid "Failed to find or parse reply control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:621
msgid "Failed to parse control head!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:636 ipa-client/ipa-getkeytab.c:656
#: ipa-client/ipa-getkeytab.c:675 ipa-client/ipa-join.c:408
#: ipa-client/ipa-join.c:483 ipa-client/ipa-join.c:501
#: ipa-client/ipa-join.c:602 ipa-client/ipa-join.c:808
#: ipa-client/ipa-join.c:869 util/ipa_krb5.c:1002 util/ipa_krb5.c:1036
#, c-format
msgid "Out of memory!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:647
msgid "Failed to parse enctype in key data!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:667
msgid "Failed to parse salt in key data!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:684
msgid "Failed to parse ending of key data!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:694
msgid "Failed to parse ending of control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:724
msgid "New Principal Password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:730
msgid "Verify Principal Password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:765
msgid "Print as little as possible"
msgstr ""

#: ipa-client/ipa-getkeytab.c:765
msgid "Output only on errors"
msgstr ""

#: ipa-client/ipa-getkeytab.c:767
msgid "Contact this specific KDC Server"
msgstr ""

#: ipa-client/ipa-getkeytab.c:768
msgid "Server Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:770 ipa-client/ipa-rmkeytab.c:171
msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)"
msgstr ""

#: ipa-client/ipa-getkeytab.c:771 ipa-client/ipa-rmkeytab.c:172
msgid "Kerberos Service Principal Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:773 ipa-client/ipa-rmkeytab.c:174
msgid "File were to store the keytab information"
msgstr ""

#: ipa-client/ipa-getkeytab.c:774 ipa-client/ipa-rmkeytab.c:174
msgid "Keytab File Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:776
msgid "Encryption types to request"
msgstr ""

#: ipa-client/ipa-getkeytab.c:777
msgid "Comma separated encryption types list"
msgstr ""

#: ipa-client/ipa-getkeytab.c:779
msgid "Show the list of permitted encryption types and exit"
msgstr ""

#: ipa-client/ipa-getkeytab.c:780
msgid "Permitted Encryption Types"
msgstr ""

#: ipa-client/ipa-getkeytab.c:782
msgid "Asks for a non-random password to use for the principal"
msgstr ""

#: ipa-client/ipa-getkeytab.c:784
msgid "LDAP DN"
msgstr ""

#: ipa-client/ipa-getkeytab.c:784
msgid "DN to bind as if not using kerberos"
msgstr ""

#: ipa-client/ipa-getkeytab.c:786
msgid "LDAP password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:786
msgid "password to use if not using kerberos"
msgstr ""

#: ipa-client/ipa-getkeytab.c:788
msgid "Retrieve current keys without changing them"
msgstr ""

#: ipa-client/ipa-getkeytab.c:813 ipa-client/ipa-rmkeytab.c:190
#, c-format
msgid "Kerberos context initialization failed\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:826 util/ipa_krb5.c:874
#, c-format
msgid "No system preferred enctypes ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:829
#, c-format
msgid "Supported encryption types:\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:833
#, c-format
msgid "Warning: failed to convert type (#%d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:852
#, c-format
msgid "Bind password required when using a bind DN.\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:859
#, c-format
msgid "Incompatible options provided (-r and -P)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:870
#, c-format
msgid ""
"Warning: salt types are not honored with randomized passwords (see opt. -P)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:882
#, c-format
msgid "Invalid Service Principal Name\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:890
#, c-format
msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:898
#, c-format
msgid ""
"Kerberos User Principal not found. Do you have a valid Credential Cache?\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:906
#, c-format
msgid "Failed to open Keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:921
#, c-format
msgid "Retrying with old method\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:929
#, c-format
msgid "Failed to create key material\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:937
#, c-format
msgid "Failed to get keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:951
#, c-format
msgid "Failed to add key to the keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:960
#, c-format
msgid "Failed to close the keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:966
#, c-format
msgid "Keytab successfully retrieved and stored in: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:65
#, c-format
msgid "No permission to join this host to the IPA domain.\n"
msgstr ""

#: ipa-client/ipa-join.c:94 ipa-client/ipa-join.c:106
#, c-format
msgid "No write permissions on keytab file '%s'\n"
msgstr ""

#: ipa-client/ipa-join.c:111
#, c-format
msgid "access() on %1$s failed: errno = %2$d\n"
msgstr ""

#: ipa-client/ipa-join.c:134 ipa-client/ipa-join.c:163
#: ipa-client/ipa-join.c:220
#, c-format
msgid "Out of memory!"
msgstr ""

#: ipa-client/ipa-join.c:227
#, c-format
msgid "Unable to initialize connection to ldap server: %s"
msgstr ""

#: ipa-client/ipa-join.c:233
#, c-format
msgid "Unable to enable SSL in LDAP\n"
msgstr ""

#: ipa-client/ipa-join.c:246
#, c-format
msgid "Unable to set LDAP version\n"
msgstr ""

#: ipa-client/ipa-join.c:266
#, c-format
msgid "Bind failed: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:337
#, c-format
msgid "Search for %1$s on rootdse failed with error %2$d\n"
msgstr ""

#: ipa-client/ipa-join.c:357 ipa-client/ipa-join.c:428
#, c-format
msgid "No values for %s"
msgstr ""

#: ipa-client/ipa-join.c:367
#, c-format
msgid "Search for IPA namingContext failed with error %d\n"
msgstr ""

#: ipa-client/ipa-join.c:373
#, c-format
msgid "IPA namingContext not found\n"
msgstr ""

#: ipa-client/ipa-join.c:419
#, c-format
msgid "Search for ipaCertificateSubjectBase failed with error %d"
msgstr ""

#: ipa-client/ipa-join.c:490
#, c-format
msgid "Unable to determine root DN of %s\n"
msgstr ""

#: ipa-client/ipa-join.c:508
#, c-format
msgid "Incorrect password.\n"
msgstr ""

#: ipa-client/ipa-join.c:516
#, c-format
msgid "Unable to determine certificate subject of %s\n"
msgstr ""

#: ipa-client/ipa-join.c:532
#, c-format
msgid "Enrollment failed. %s\n"
msgstr ""

#: ipa-client/ipa-join.c:661
#, c-format
msgid "principal not found in XML-RPC response\n"
msgstr ""

#: ipa-client/ipa-join.c:676
#, c-format
msgid "Host is already joined.\n"
msgstr ""

#: ipa-client/ipa-join.c:751 ipa-client/ipa-join.c:955
#, c-format
msgid "Unable to determine IPA server from %s\n"
msgstr ""

#: ipa-client/ipa-join.c:772 ipa-client/ipa-join.c:970
#, c-format
msgid "The hostname must be fully-qualified: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:781 ipa-client/ipa-join.c:986
#, c-format
msgid "Unable to join host: Kerberos context initialization failed\n"
msgstr ""

#: ipa-client/ipa-join.c:789
#, c-format
msgid "Error resolving keytab: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:798
#, c-format
msgid "Error getting default Kerberos realm: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:816
#, c-format
msgid "Error parsing \"%1$s\": %2$s.\n"
msgstr ""

#: ipa-client/ipa-join.c:834
#, c-format
msgid "Error obtaining initial credentials: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:845
#, c-format
msgid "Unable to generate Kerberos Credential Cache\n"
msgstr ""

#: ipa-client/ipa-join.c:853
#, c-format
msgid "Error storing creds in credential cache: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:900
#, c-format
msgid "Unenrollment successful.\n"
msgstr ""

#: ipa-client/ipa-join.c:903
#, c-format
msgid "Unenrollment failed.\n"
msgstr ""

#: ipa-client/ipa-join.c:908
#, c-format
msgid "result not found in XML-RPC response\n"
msgstr ""

#: ipa-client/ipa-join.c:976
#, c-format
msgid "The hostname must not be: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:993
#, c-format
msgid "Unable to join host: Kerberos Credential Cache not found\n"
msgstr ""

#: ipa-client/ipa-join.c:1001
#, c-format
msgid ""
"Unable to join host: Kerberos User Principal not found and host password not "
"provided.\n"
msgstr ""

#: ipa-client/ipa-join.c:1016
#, c-format
msgid "fork() failed\n"
msgstr ""

#: ipa-client/ipa-join.c:1045
#, c-format
msgid "ipa-getkeytab not found\n"
msgstr ""

#: ipa-client/ipa-join.c:1048
#, c-format
msgid "ipa-getkeytab has bad permissions?\n"
msgstr ""

#: ipa-client/ipa-join.c:1051
#, c-format
msgid "executing ipa-getkeytab failed, errno %d\n"
msgstr ""

#: ipa-client/ipa-join.c:1063
#, c-format
msgid "child exited with %d\n"
msgstr ""

#: ipa-client/ipa-join.c:1069
#, c-format
msgid "Certificate subject base is: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:1107
msgid "Print the raw XML-RPC output in GSSAPI mode"
msgstr ""

#: ipa-client/ipa-join.c:1109
msgid "Quiet mode. Only errors are displayed."
msgstr ""

#: ipa-client/ipa-join.c:1111
msgid "Unenroll this host from IPA server"
msgstr ""

#: ipa-client/ipa-join.c:1113
msgid "Hostname of this server"
msgstr ""

#: ipa-client/ipa-join.c:1113 ipa-client/ipa-join.c:1115
msgid "hostname"
msgstr ""

#: ipa-client/ipa-join.c:1115
msgid "IPA Server to use"
msgstr ""

#: ipa-client/ipa-join.c:1117
msgid "Specifies where to store keytab information."
msgstr ""

#: ipa-client/ipa-join.c:1117
msgid "filename"
msgstr ""

#: ipa-client/ipa-join.c:1119
msgid "Force the host join. Rejoin even if already joined."
msgstr ""

#: ipa-client/ipa-join.c:1121
msgid "LDAP password (if not using Kerberos)"
msgstr ""

#: ipa-client/ipa-join.c:1121
msgid "password"
msgstr ""

#: ipa-client/ipa-join.c:1123
msgid "LDAP basedn"
msgstr ""

#: ipa-client/ipa-join.c:1123
msgid "basedn"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:43
#, c-format
msgid "Unable to parse principal name\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:45
#, c-format
msgid "krb5_parse_name %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:55
#, c-format
msgid "Removing principal %s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:68
#, c-format
msgid "Failed to open keytab\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:72
#, c-format
msgid "principal not found\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:74
#, c-format
msgid "krb5_kt_get_entry %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:82
#, c-format
msgid "Unable to remove entry\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:84
#, c-format
msgid "kvno %d\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:85
#, c-format
msgid "krb5_kt_remove_entry %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:119
#, c-format
msgid "Unable to parse principal\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:121
#, c-format
msgid "krb5_unparse_name %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:143
#, c-format
msgid "realm not found\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:169
msgid "Print debugging information"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:169
msgid "Debugging output"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:176
msgid "Remove all principals in this realm"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:230 ipa-client/ipa-rmkeytab.c:237
#, c-format
msgid "Failed to open keytab '%1$s': %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:253
#, c-format
msgid "Closing keytab failed\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:255
#, c-format
msgid "krb5_kt_close %1$d: %2$s\n"
msgstr ""

#: util/ipa_krb5.c:795 util/ipa_krb5.c:810
msgid "Out of memory\n"
msgstr ""

#: util/ipa_krb5.c:828
msgid "Warning unrecognized encryption type.\n"
msgstr ""

#: util/ipa_krb5.c:842
msgid "Warning unrecognized salt type.\n"
msgstr ""

#: util/ipa_krb5.c:882
msgid "Out of memory!?\n"
msgstr ""

#: util/ipa_krb5.c:917
msgid "Enctype comparison failed!\n"
msgstr ""

#: util/ipa_krb5.c:982
msgid "Failed to create random key!\n"
msgstr ""

#: util/ipa_krb5.c:995 util/ipa_krb5.c:1013 util/ipa_krb5.c:1021
#: util/ipa_krb5.c:1061
msgid "Failed to create key!\n"
msgstr ""

#: util/ipa_krb5.c:1047
msgid "Bad or unsupported salt type.\n"
msgstr ""