summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-12-05 13:12:14 +0100
committerJakub Hrozek <jhrozek@redhat.com>2014-12-05 13:12:14 +0100
commita1215fb71c84745b318a19d4e9213f408e316854 (patch)
tree6095a66c75cd2226507b8df9b1d8a2a4d17c378d
parentce2187657335d96c3dc995fcb6e170ca73560041 (diff)
downloadsssd-1_9_7.tar.gz
sssd-1_9_7.tar.xz
sssd-1_9_7.zip
Updating translations for the 1.9.7 releasesssd-1_9_7
-rw-r--r--po/bg.po16
-rw-r--r--po/ca.po886
-rw-r--r--po/de.po871
-rw-r--r--po/es.po19
-rw-r--r--po/eu.po14
-rw-r--r--po/fr.po81
-rw-r--r--po/hu.po21
-rw-r--r--po/id.po16
-rw-r--r--po/it.po14
-rw-r--r--po/ja.po19
-rw-r--r--po/nb.po14
-rw-r--r--po/nl.po20
-rw-r--r--po/pl.po71
-rw-r--r--po/pt.po16
-rw-r--r--po/ru.po14
-rw-r--r--po/sssd.pot10
-rw-r--r--po/sv.po71
-rw-r--r--po/tg.po14
-rw-r--r--po/tr.po14
-rw-r--r--po/uk.po76
-rw-r--r--po/zh_CN.po14
-rw-r--r--po/zh_TW.po14
-rw-r--r--src/man/po/br.po62
-rw-r--r--src/man/po/ca.po252
-rw-r--r--src/man/po/de.po12194
-rw-r--r--src/man/po/es.po420
-rw-r--r--src/man/po/fr.po1021
-rw-r--r--src/man/po/ja.po474
-rw-r--r--src/man/po/lv.po59
-rw-r--r--src/man/po/nl.po58
-rw-r--r--src/man/po/po4a.cfg2
-rw-r--r--src/man/po/pt.po142
-rw-r--r--src/man/po/pt_BR.po8436
-rw-r--r--src/man/po/ru.po58
-rw-r--r--src/man/po/sssd-docs.pot4
-rw-r--r--src/man/po/sv.po8430
-rw-r--r--src/man/po/tg.po58
-rw-r--r--src/man/po/uk.po1625
-rw-r--r--src/man/po/zh_CN.po34
39 files changed, 33721 insertions, 1913 deletions
diff --git a/po/bg.po b/po/bg.po
index c7f829ba4..3f014237a 100644
--- a/po/bg.po
+++ b/po/bg.po
@@ -8,11 +8,11 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Bulgarian (http://www.transifex.com/projects/p/fedora/"
-"language/bg/)\n"
+"Language-Team: Bulgarian (http://www.transifex.com/projects/p/sssd/language/"
+"bg/)\n"
"Language: bg\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -1045,22 +1045,22 @@ msgstr "Задаване на друг (не подразбиращия се) к
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Ниво на debug"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/ca.po b/po/ca.po
index 297f7e935..645f50cf9 100644
--- a/po/ca.po
+++ b/po/ca.po
@@ -3,1119 +3,1158 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# muzzol mussol <muzzol@gmail.com>, 2012
-# muzzol mussol <muzzol@gmail.com>, 2012
+# muzzol <muzzol@gmail.com>, 2012
+# muzzol <muzzol@gmail.com>, 2012
+# muzzol <muzzol@gmail.com>, 2012
+# sgallagh <sgallagh@redhat.com>, 2011
# sgallagh <sgallagh@redhat.com>, 2011
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-07-24 14:24+0200\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-06-04 20:00+0200\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/ca/)\n"
+"Language-Team: Catalan (http://www.transifex.com/projects/p/sssd/language/ca/)\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Language: ca\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
-#: src/config/SSSDConfig/__init__.py.in:39
+#: src/config/SSSDConfig/__init__.py.in:40
msgid "Set the verbosity of the debug logging"
msgstr "Estableix la verbositat del registre de depuració"
-#: src/config/SSSDConfig/__init__.py.in:40
+#: src/config/SSSDConfig/__init__.py.in:41
msgid "Include timestamps in debug logs"
msgstr "Inclou les marques horàries als registres de depuració"
-#: src/config/SSSDConfig/__init__.py.in:41
+#: src/config/SSSDConfig/__init__.py.in:42
msgid "Include microseconds in timestamps in debug logs"
msgstr "Inclou mil·lisegons a les marques horàries als registres de depuració"
-#: src/config/SSSDConfig/__init__.py.in:42
+#: src/config/SSSDConfig/__init__.py.in:43
msgid "Write debug messages to logfiles"
msgstr "Escriu els missatges de depuració als fitxers de registre"
-#: src/config/SSSDConfig/__init__.py.in:43
+#: src/config/SSSDConfig/__init__.py.in:44
msgid "Ping timeout before restarting service"
msgstr "Temps d'espera del ping abans de reiniciar el servei"
-#: src/config/SSSDConfig/__init__.py.in:44
+#: src/config/SSSDConfig/__init__.py.in:45
msgid ""
"Timeout between three failed ping checks and forcibly killing the service"
msgstr "Temps d'espera entre tres comprovacions de ping fallades i matar forçadament el servei"
-#: src/config/SSSDConfig/__init__.py.in:45
+#: src/config/SSSDConfig/__init__.py.in:46
msgid "Command to start service"
msgstr "Comanda per iniciar el servei"
-#: src/config/SSSDConfig/__init__.py.in:46
+#: src/config/SSSDConfig/__init__.py.in:47
msgid "Number of times to attempt connection to Data Providers"
msgstr "Número d'intents de connexió als Proveïdors de Dades"
-#: src/config/SSSDConfig/__init__.py.in:47
+#: src/config/SSSDConfig/__init__.py.in:48
msgid "The number of file descriptors that may be opened by this responder"
msgstr "El número de descriptors de fitxers que pot obrir aquesta resposta"
-#: src/config/SSSDConfig/__init__.py.in:48
+#: src/config/SSSDConfig/__init__.py.in:49
msgid "Idle time before automatic disconnection of a client"
msgstr "Temps d'inactivitat abans de desconnexió automàtica d'un client"
-#: src/config/SSSDConfig/__init__.py.in:51
+#: src/config/SSSDConfig/__init__.py.in:52
msgid "SSSD Services to start"
msgstr "Serveis del SSSD per iniciar"
-#: src/config/SSSDConfig/__init__.py.in:52
+#: src/config/SSSDConfig/__init__.py.in:53
msgid "SSSD Domains to start"
msgstr "Dominis del SSD per iniciar"
-#: src/config/SSSDConfig/__init__.py.in:53
+#: src/config/SSSDConfig/__init__.py.in:54
msgid "Timeout for messages sent over the SBUS"
msgstr "Temps d'espera per missatges enviats per SBUS"
-#: src/config/SSSDConfig/__init__.py.in:54
+#: src/config/SSSDConfig/__init__.py.in:55
msgid "Regex to parse username and domain"
msgstr "Expressió regular per analitzar el nom d'usuari i el domini"
-#: src/config/SSSDConfig/__init__.py.in:55
+#: src/config/SSSDConfig/__init__.py.in:56
msgid "Printf-compatible format for displaying fully-qualified names"
msgstr "Format compatible amb printf per mostrar els noms plenament qualificats"
-#: src/config/SSSDConfig/__init__.py.in:56
+#: src/config/SSSDConfig/__init__.py.in:57
msgid ""
"Directory on the filesystem where SSSD should store Kerberos replay cache "
"files."
msgstr "Directori al sistema de fitxers on el SSSD ha d'emmagatzemar els fitxers cau de Kerberos"
-#: src/config/SSSDConfig/__init__.py.in:57
+#: src/config/SSSDConfig/__init__.py.in:58
msgid "Domain to add to names without a domain component."
msgstr "Domini a afegir als noms sense un component de domini."
-#: src/config/SSSDConfig/__init__.py.in:60
+#: src/config/SSSDConfig/__init__.py.in:61
msgid "Enumeration cache timeout length (seconds)"
msgstr "Llargària del temps d'espera de l'enumeració en el cau (en segons)"
-#: src/config/SSSDConfig/__init__.py.in:61
+#: src/config/SSSDConfig/__init__.py.in:62
msgid "Entry cache background update timeout length (seconds)"
msgstr "Llargària del temps d'espera de l'actualització en rerefons de les entrades en cau (en segons)"
-#: src/config/SSSDConfig/__init__.py.in:62
-#: src/config/SSSDConfig/__init__.py.in:88
+#: src/config/SSSDConfig/__init__.py.in:63
+#: src/config/SSSDConfig/__init__.py.in:89
msgid "Negative cache timeout length (seconds)"
msgstr "Llargària del temps d'espera del cau negatiu (en segons)"
-#: src/config/SSSDConfig/__init__.py.in:63
+#: src/config/SSSDConfig/__init__.py.in:64
msgid "Users that SSSD should explicitly ignore"
msgstr "Usuaris que l'SSSD hauria d'ignorar explícitament"
-#: src/config/SSSDConfig/__init__.py.in:64
+#: src/config/SSSDConfig/__init__.py.in:65
msgid "Groups that SSSD should explicitly ignore"
msgstr "Grups que l'SSSD hauria d'ignorar explícitament"
-#: src/config/SSSDConfig/__init__.py.in:65
+#: src/config/SSSDConfig/__init__.py.in:66
msgid "Should filtered users appear in groups"
msgstr "Haurien d'apareixer als grups els usuaris filtrats"
-#: src/config/SSSDConfig/__init__.py.in:66
+#: src/config/SSSDConfig/__init__.py.in:67
msgid "The value of the password field the NSS provider should return"
msgstr "El valor al camp de contrasenya que el proveïdor NSS hauria de respondre"
-#: src/config/SSSDConfig/__init__.py.in:67
+#: src/config/SSSDConfig/__init__.py.in:68
msgid "Override homedir value from the identity provider with this value"
msgstr "Substitueix el valor de directori d'usuari del proveïdor d'identitat amb aquest valor"
-#: src/config/SSSDConfig/__init__.py.in:68
+#: src/config/SSSDConfig/__init__.py.in:69
msgid ""
"Substitute empty homedir value from the identity provider with this value"
msgstr "Substitueix el valor buit de directori d'usuari del proveïdor d'identitat amb aquest valor"
-#: src/config/SSSDConfig/__init__.py.in:69
+#: src/config/SSSDConfig/__init__.py.in:70
msgid "Override shell value from the identity provider with this value"
msgstr "Substituir el valor de l'intèrpret d'ordres des del proveïdor d'identitat amb aquest valor"
-#: src/config/SSSDConfig/__init__.py.in:70
+#: src/config/SSSDConfig/__init__.py.in:71
msgid "The list of shells users are allowed to log in with"
msgstr "Llista d'intèrprets d'ordres amb que els usuaris poden iniciar sessió"
-#: src/config/SSSDConfig/__init__.py.in:71
+#: src/config/SSSDConfig/__init__.py.in:72
msgid ""
"The list of shells that will be vetoed, and replaced with the fallback shell"
msgstr "Llista d'intèrprets d'ordres que seran vetats i substituits amb l'intèrpret alternatiu"
-#: src/config/SSSDConfig/__init__.py.in:72
+#: src/config/SSSDConfig/__init__.py.in:73
msgid ""
"If a shell stored in central directory is allowed but not available, use "
"this fallback"
msgstr "Si un intèrpret d'ordres establert al directori central està permés però no es troba disponible, utilitza aquesta alternativa"
-#: src/config/SSSDConfig/__init__.py.in:73
+#: src/config/SSSDConfig/__init__.py.in:74
msgid "Shell to use if the provider does not list one"
msgstr "Intèrpret d'ordres a utilitzar si el proveïdor no en llista un"
-#: src/config/SSSDConfig/__init__.py.in:74
+#: src/config/SSSDConfig/__init__.py.in:75
msgid "How long will be in-memory cache records valid"
msgstr "Quant temps seran vàlids els registres de memòria cau"
-#: src/config/SSSDConfig/__init__.py.in:77
+#: src/config/SSSDConfig/__init__.py.in:78
msgid "How long to allow cached logins between online logins (days)"
msgstr "Quant temps s'ha de permetre els inicis de sessió en cau entre inicis de sessió en línia (en dies)"
-#: src/config/SSSDConfig/__init__.py.in:78
+#: src/config/SSSDConfig/__init__.py.in:79
msgid "How many failed logins attempts are allowed when offline"
msgstr "Quants intents fallits d'inicis de sessió es permeten en estar fora de línia"
-#: src/config/SSSDConfig/__init__.py.in:79
+#: src/config/SSSDConfig/__init__.py.in:80
msgid ""
"How long (minutes) to deny login after offline_failed_login_attempts has "
"been reached"
msgstr "Quant temps (en minuts) s'ha de denegar l'inici de sessió després d'haver assolit offline_failed_login_attempts"
-#: src/config/SSSDConfig/__init__.py.in:80
+#: src/config/SSSDConfig/__init__.py.in:81
msgid "What kind of messages are displayed to the user during authentication"
msgstr "Quins tipus de missatges es mostres a l'usuari durant l'autenticació"
-#: src/config/SSSDConfig/__init__.py.in:81
+#: src/config/SSSDConfig/__init__.py.in:82
msgid "How many seconds to keep identity information cached for PAM requests"
msgstr "Quants segons s'ha de mantenir la informació en cau per les peticions PAM"
-#: src/config/SSSDConfig/__init__.py.in:82
+#: src/config/SSSDConfig/__init__.py.in:83
msgid "How many days before password expiration a warning should be displayed"
msgstr "Quants dies abans de l'expiració de la contrasenya s'hauria de mostrar un avís"
-#: src/config/SSSDConfig/__init__.py.in:85
+#: src/config/SSSDConfig/__init__.py.in:86
msgid "Whether to evaluate the time-based attributes in sudo rules"
msgstr "Si s'han d'avaluar els atributs de temps a les regles sudo"
-#: src/config/SSSDConfig/__init__.py.in:91
+#: src/config/SSSDConfig/__init__.py.in:92
msgid "Whether to hash host names and addresses in the known_hosts file"
msgstr "Si s'han d'utilitzar els algoritmes hash als noms d'ordinadors i a les adreces dins el fitxer known_hosts"
-#: src/config/SSSDConfig/__init__.py.in:92
+#: src/config/SSSDConfig/__init__.py.in:93
msgid ""
"How many seconds to keep a host in the known_hosts file after its host keys "
"were requested"
msgstr "Quants segons s'ha de mantenir una màquina a l'arxiu de known_hosts després que s'ha sol·licitat la seva clau"
-#: src/config/SSSDConfig/__init__.py.in:95
+#: src/config/SSSDConfig/__init__.py.in:96
msgid "List of UIDs or user names allowed to access the PAC responder"
msgstr "Llista d'UIDs o noms d'usuari que poden accedir al contestador de PAC"
-#: src/config/SSSDConfig/__init__.py.in:98
+#: src/config/SSSDConfig/__init__.py.in:99
+msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:100
+msgid "List of user attributes the InfoPipe is allowed to publish"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:103
msgid "Identity provider"
msgstr "Proveïdor d'identitat"
-#: src/config/SSSDConfig/__init__.py.in:99
+#: src/config/SSSDConfig/__init__.py.in:104
msgid "Authentication provider"
msgstr "Proveïdor d'autenticació"
-#: src/config/SSSDConfig/__init__.py.in:100
+#: src/config/SSSDConfig/__init__.py.in:105
msgid "Access control provider"
msgstr "Proveïdor de control d'accés"
-#: src/config/SSSDConfig/__init__.py.in:101
+#: src/config/SSSDConfig/__init__.py.in:106
msgid "Password change provider"
msgstr "Proveïdor de canvi de contrasenya"
-#: src/config/SSSDConfig/__init__.py.in:102
+#: src/config/SSSDConfig/__init__.py.in:107
msgid "SUDO provider"
msgstr "Proveïdor de SUDO"
-#: src/config/SSSDConfig/__init__.py.in:103
+#: src/config/SSSDConfig/__init__.py.in:108
msgid "Autofs provider"
msgstr "Proveïdor d'Autofs"
-#: src/config/SSSDConfig/__init__.py.in:104
+#: src/config/SSSDConfig/__init__.py.in:109
msgid "Session-loading provider"
msgstr "Proveïdor de càrrega de sessió"
-#: src/config/SSSDConfig/__init__.py.in:105
+#: src/config/SSSDConfig/__init__.py.in:110
msgid "Host identity provider"
msgstr "Proveïdor d'identitat d'ordinadors"
-#: src/config/SSSDConfig/__init__.py.in:108
+#: src/config/SSSDConfig/__init__.py.in:113
msgid "Minimum user ID"
msgstr "ID mínim d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:109
+#: src/config/SSSDConfig/__init__.py.in:114
msgid "Maximum user ID"
msgstr "ID màxim d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:110
+#: src/config/SSSDConfig/__init__.py.in:115
msgid "Enable enumerating all users/groups"
msgstr "Activa l'enumeració de tots els usuaris/grups"
-#: src/config/SSSDConfig/__init__.py.in:111
+#: src/config/SSSDConfig/__init__.py.in:116
msgid "Cache credentials for offline login"
msgstr "Credencials en cau per inicis de sessió fora de línia"
-#: src/config/SSSDConfig/__init__.py.in:112
+#: src/config/SSSDConfig/__init__.py.in:117
msgid "Store password hashes"
msgstr "Emmagatzema els codis hash de les contrasenyes"
-#: src/config/SSSDConfig/__init__.py.in:113
+#: src/config/SSSDConfig/__init__.py.in:118
msgid "Display users/groups in fully-qualified form"
msgstr "Mostra els usuaris/grups en format plenament qualificat"
-#: src/config/SSSDConfig/__init__.py.in:114
+#: src/config/SSSDConfig/__init__.py.in:119
msgid "Don't include group members in group lookups"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:115
-#: src/config/SSSDConfig/__init__.py.in:122
-#: src/config/SSSDConfig/__init__.py.in:123
-#: src/config/SSSDConfig/__init__.py.in:124
-#: src/config/SSSDConfig/__init__.py.in:125
-#: src/config/SSSDConfig/__init__.py.in:126
+#: src/config/SSSDConfig/__init__.py.in:120
#: src/config/SSSDConfig/__init__.py.in:127
+#: src/config/SSSDConfig/__init__.py.in:128
+#: src/config/SSSDConfig/__init__.py.in:129
+#: src/config/SSSDConfig/__init__.py.in:130
+#: src/config/SSSDConfig/__init__.py.in:131
+#: src/config/SSSDConfig/__init__.py.in:132
msgid "Entry cache timeout length (seconds)"
msgstr "Llargària del temps d'espera de les entrades cau (en segons)"
-#: src/config/SSSDConfig/__init__.py.in:116
+#: src/config/SSSDConfig/__init__.py.in:121
msgid ""
"Restrict or prefer a specific address family when performing DNS lookups"
msgstr "Restringeix o prefereix una família específica d'adreces en efectuar peticions DNS"
-#: src/config/SSSDConfig/__init__.py.in:117
+#: src/config/SSSDConfig/__init__.py.in:122
msgid "How long to keep cached entries after last successful login (days)"
msgstr "Quant temps s'ha de mantenir les entrades en cau després d'un inici de sessió amb èxit (en dies)"
-#: src/config/SSSDConfig/__init__.py.in:118
+#: src/config/SSSDConfig/__init__.py.in:123
msgid "How long to wait for replies from DNS when resolving servers (seconds)"
msgstr "Temps d'espera per les respostes DNS en resoldre servidors (en segons)"
-#: src/config/SSSDConfig/__init__.py.in:119
+#: src/config/SSSDConfig/__init__.py.in:124
msgid "The domain part of service discovery DNS query"
msgstr "La part del domini de la petició DNS de la recerca de servei"
-#: src/config/SSSDConfig/__init__.py.in:120
+#: src/config/SSSDConfig/__init__.py.in:125
msgid "Override GID value from the identity provider with this value"
msgstr "Substitueix el valor GID del proveïdor d'identitat amb aquest valor"
-#: src/config/SSSDConfig/__init__.py.in:121
+#: src/config/SSSDConfig/__init__.py.in:126
msgid "Treat usernames as case sensitive"
msgstr "Distingeix entre majúscules i minúscules als noms d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:128
+#: src/config/SSSDConfig/__init__.py.in:133
msgid "How often should expired entries be refreshed in background"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:129
+#: src/config/SSSDConfig/__init__.py.in:134
msgid "Whether to automatically update the client's DNS entry"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:130
-#: src/config/SSSDConfig/__init__.py.in:143
+#: src/config/SSSDConfig/__init__.py.in:135
+#: src/config/SSSDConfig/__init__.py.in:150
msgid "The TTL to apply to the client's DNS entry after updating it"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:131
-#: src/config/SSSDConfig/__init__.py.in:144
+#: src/config/SSSDConfig/__init__.py.in:136
+#: src/config/SSSDConfig/__init__.py.in:151
msgid "The interface whose IP should be used for dynamic DNS updates"
msgstr "La interfície amb la IP que s'hauria d'utilitzar per les actualitzacions dinàmiques de DNS"
-#: src/config/SSSDConfig/__init__.py.in:132
+#: src/config/SSSDConfig/__init__.py.in:137
msgid "How often to periodically update the client's DNS entry"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:133
+#: src/config/SSSDConfig/__init__.py.in:138
msgid "Whether the provider should explicitly update the PTR record as well"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:134
+#: src/config/SSSDConfig/__init__.py.in:139
msgid "Whether the nsupdate utility should default to using TCP"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:135
+#: src/config/SSSDConfig/__init__.py.in:140
msgid "What kind of authentication should be used to perform the DNS update"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:138
+#: src/config/SSSDConfig/__init__.py.in:141
+msgid "Control enumeration of trusted domains"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:142
+msgid "How often should subdomains list be refreshed"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:145
msgid "IPA domain"
msgstr "Domini IPA"
-#: src/config/SSSDConfig/__init__.py.in:139
+#: src/config/SSSDConfig/__init__.py.in:146
msgid "IPA server address"
msgstr "Adreça del servidor IPA"
-#: src/config/SSSDConfig/__init__.py.in:140
+#: src/config/SSSDConfig/__init__.py.in:147
msgid "Address of backup IPA server"
msgstr "Adreça del servidor IPA de reserva "
-#: src/config/SSSDConfig/__init__.py.in:141
+#: src/config/SSSDConfig/__init__.py.in:148
msgid "IPA client hostname"
msgstr "Nom d'ordinador del client IPA"
-#: src/config/SSSDConfig/__init__.py.in:142
+#: src/config/SSSDConfig/__init__.py.in:149
msgid "Whether to automatically update the client's DNS entry in FreeIPA"
msgstr "Si actualitzar automàticament l'entrada DNS del client a FreeIPA"
-#: src/config/SSSDConfig/__init__.py.in:145
+#: src/config/SSSDConfig/__init__.py.in:152
msgid "Search base for HBAC related objects"
msgstr "Base de cerca pels objectes HBAC"
-#: src/config/SSSDConfig/__init__.py.in:146
+#: src/config/SSSDConfig/__init__.py.in:153
msgid ""
"The amount of time between lookups of the HBAC rules against the IPA server"
msgstr "Quantitat de temps entre peticions de les regles HBAC contra el servidor IPA"
-#: src/config/SSSDConfig/__init__.py.in:147
+#: src/config/SSSDConfig/__init__.py.in:154
msgid ""
"The amount of time in seconds between lookups of the SELinux maps against "
"the IPA server"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:148
+#: src/config/SSSDConfig/__init__.py.in:155
msgid "If DENY rules are present, either DENY_ALL or IGNORE"
msgstr "Si les regles DENY són presents, o DENY_ALL o IGNORE"
-#: src/config/SSSDConfig/__init__.py.in:149
+#: src/config/SSSDConfig/__init__.py.in:156
msgid "If set to false, host argument given by PAM will be ignored"
msgstr "Si s'estableix a fals, l'argument d'ordinador facilitat per PAM serà ignorat"
-#: src/config/SSSDConfig/__init__.py.in:150
+#: src/config/SSSDConfig/__init__.py.in:157
msgid "The automounter location this IPA client is using"
msgstr "La ubicació del muntador automàtic que aquest client IPA està utilitzant"
-#: src/config/SSSDConfig/__init__.py.in:151
+#: src/config/SSSDConfig/__init__.py.in:158
msgid "Search base for object containing info about IPA domain"
msgstr "Base de cerca per a l'objecte que conté informació sobre el domini de l'IPA"
-#: src/config/SSSDConfig/__init__.py.in:152
+#: src/config/SSSDConfig/__init__.py.in:159
msgid "Search base for objects containing info about ID ranges"
msgstr "Base de cerca per a objectes que contenen informació sobre intervals d'ID"
-#: src/config/SSSDConfig/__init__.py.in:153
#: src/config/SSSDConfig/__init__.py.in:160
+#: src/config/SSSDConfig/__init__.py.in:167
msgid "Enable DNS sites - location based service discovery"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:156
+#: src/config/SSSDConfig/__init__.py.in:163
msgid "Active Directory domain"
msgstr "Domini d'Active Directory"
-#: src/config/SSSDConfig/__init__.py.in:157
+#: src/config/SSSDConfig/__init__.py.in:164
msgid "Active Directory server address"
msgstr "Adreça de servidor d'Active Directory"
-#: src/config/SSSDConfig/__init__.py.in:158
+#: src/config/SSSDConfig/__init__.py.in:165
msgid "Active Directory backup server address"
msgstr "Adreça del servidor d'Active Directory de reserva"
-#: src/config/SSSDConfig/__init__.py.in:159
+#: src/config/SSSDConfig/__init__.py.in:166
msgid "Active Directory client hostname"
msgstr "Nom de màquina del client d'Active Directory"
-#: src/config/SSSDConfig/__init__.py.in:163
-#: src/config/SSSDConfig/__init__.py.in:164
+#: src/config/SSSDConfig/__init__.py.in:168
+#: src/config/SSSDConfig/__init__.py.in:332
+msgid "LDAP filter to determine access privileges"
+msgstr "Filtre LDAP per determinar els privilegis d'accés"
+
+#: src/config/SSSDConfig/__init__.py.in:169
+msgid "Whether to use the Global Catalog for lookups"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:170
+msgid "Operation mode for GPO-based access control"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:173
+#: src/config/SSSDConfig/__init__.py.in:174
msgid "Kerberos server address"
msgstr "Adreça del servidor Kerberos"
-#: src/config/SSSDConfig/__init__.py.in:165
+#: src/config/SSSDConfig/__init__.py.in:175
msgid "Kerberos backup server address"
msgstr "Adreça de servidor Kerberos de reserva"
-#: src/config/SSSDConfig/__init__.py.in:166
+#: src/config/SSSDConfig/__init__.py.in:176
msgid "Kerberos realm"
msgstr "Reialme Kerberos"
-#: src/config/SSSDConfig/__init__.py.in:167
+#: src/config/SSSDConfig/__init__.py.in:177
msgid "Authentication timeout"
msgstr "Temps d'espera de la autenticació"
-#: src/config/SSSDConfig/__init__.py.in:168
+#: src/config/SSSDConfig/__init__.py.in:178
msgid "Whether to create kdcinfo files"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:171
+#: src/config/SSSDConfig/__init__.py.in:181
msgid "Directory to store credential caches"
msgstr "Directori on emmagatzemar el cau de credencials"
-#: src/config/SSSDConfig/__init__.py.in:172
+#: src/config/SSSDConfig/__init__.py.in:182
msgid "Location of the user's credential cache"
msgstr "Ubicació de la cau de credencials d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:173
+#: src/config/SSSDConfig/__init__.py.in:183
msgid "Location of the keytab to validate credentials"
msgstr "Ubicació de la clau per validar les credencials"
-#: src/config/SSSDConfig/__init__.py.in:174
+#: src/config/SSSDConfig/__init__.py.in:184
msgid "Enable credential validation"
msgstr "Activa la validació de credencials"
-#: src/config/SSSDConfig/__init__.py.in:175
+#: src/config/SSSDConfig/__init__.py.in:185
msgid "Store password if offline for later online authentication"
msgstr "Emmagatzema la contrasenya quan estigui fora de línia per autenticació en línia posterior"
-#: src/config/SSSDConfig/__init__.py.in:176
+#: src/config/SSSDConfig/__init__.py.in:186
msgid "Renewable lifetime of the TGT"
msgstr "Temps de vida renovable del TGT"
-#: src/config/SSSDConfig/__init__.py.in:177
+#: src/config/SSSDConfig/__init__.py.in:187
msgid "Lifetime of the TGT"
msgstr "Temps de vida del TGT"
-#: src/config/SSSDConfig/__init__.py.in:178
+#: src/config/SSSDConfig/__init__.py.in:188
msgid "Time between two checks for renewal"
msgstr "Temps entre les dues comprovacions per renovar"
-#: src/config/SSSDConfig/__init__.py.in:179
+#: src/config/SSSDConfig/__init__.py.in:189
msgid "Enables FAST"
msgstr "Activa FAST"
-#: src/config/SSSDConfig/__init__.py.in:180
+#: src/config/SSSDConfig/__init__.py.in:190
msgid "Selects the principal to use for FAST"
msgstr "Selecciona el principal per utilitzar amb FAST"
-#: src/config/SSSDConfig/__init__.py.in:181
+#: src/config/SSSDConfig/__init__.py.in:191
msgid "Enables principal canonicalization"
msgstr "Activa la canonització del principal"
-#: src/config/SSSDConfig/__init__.py.in:182
+#: src/config/SSSDConfig/__init__.py.in:192
msgid "Enables enterprise principals"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:185
-#: src/config/SSSDConfig/__init__.py.in:186
+#: src/config/SSSDConfig/__init__.py.in:195
+#: src/config/SSSDConfig/__init__.py.in:196
msgid "Server where the change password service is running if not on the KDC"
msgstr "Servidor on es troba el servei de canvi de contrasenya si no és al KDC"
-#: src/config/SSSDConfig/__init__.py.in:189
+#: src/config/SSSDConfig/__init__.py.in:199
msgid "ldap_uri, The URI of the LDAP server"
msgstr "ldap_uri, La URI del servidor LDAP"
-#: src/config/SSSDConfig/__init__.py.in:190
+#: src/config/SSSDConfig/__init__.py.in:200
msgid "ldap_backup_uri, The URI of the LDAP server"
msgstr "ldap_backup_uri, la URI del servidor LDAP"
-#: src/config/SSSDConfig/__init__.py.in:191
+#: src/config/SSSDConfig/__init__.py.in:201
msgid "The default base DN"
msgstr "La base DN per defecte"
-#: src/config/SSSDConfig/__init__.py.in:192
+#: src/config/SSSDConfig/__init__.py.in:202
msgid "The Schema Type in use on the LDAP server, rfc2307"
msgstr "El tipus d'esquema en us al servidor LDAP, rfc2307"
-#: src/config/SSSDConfig/__init__.py.in:193
+#: src/config/SSSDConfig/__init__.py.in:203
msgid "The default bind DN"
msgstr "La connexió DN per defecte"
-#: src/config/SSSDConfig/__init__.py.in:194
+#: src/config/SSSDConfig/__init__.py.in:204
msgid "The type of the authentication token of the default bind DN"
msgstr "El tipus del testimoni d'autenticació a la connexió DN per defecte"
-#: src/config/SSSDConfig/__init__.py.in:195
+#: src/config/SSSDConfig/__init__.py.in:205
msgid "The authentication token of the default bind DN"
msgstr "El testimoni d'autenticació de la connexió DN per defecte"
-#: src/config/SSSDConfig/__init__.py.in:196
+#: src/config/SSSDConfig/__init__.py.in:206
msgid "Length of time to attempt connection"
msgstr "Llargària del temps per intentar una connexió"
-#: src/config/SSSDConfig/__init__.py.in:197
+#: src/config/SSSDConfig/__init__.py.in:207
msgid "Length of time to attempt synchronous LDAP operations"
msgstr "Llargària del temps per intentar operacions LDAP asíncrones"
-#: src/config/SSSDConfig/__init__.py.in:198
+#: src/config/SSSDConfig/__init__.py.in:208
msgid "Length of time between attempts to reconnect while offline"
msgstr "Llargària del temps entre intents per re-connectar quan estigui fora de línia"
-#: src/config/SSSDConfig/__init__.py.in:199
+#: src/config/SSSDConfig/__init__.py.in:209
msgid "Use only the upper case for realm names"
msgstr "Utilitza només majúscules pels noms de reialme"
-#: src/config/SSSDConfig/__init__.py.in:200
+#: src/config/SSSDConfig/__init__.py.in:210
msgid "File that contains CA certificates"
msgstr "Fitxer que conté els certificats CA"
-#: src/config/SSSDConfig/__init__.py.in:201
+#: src/config/SSSDConfig/__init__.py.in:211
msgid "Path to CA certificate directory"
msgstr "Ruta al directori de certificats CA"
-#: src/config/SSSDConfig/__init__.py.in:202
+#: src/config/SSSDConfig/__init__.py.in:212
msgid "File that contains the client certificate"
msgstr "Fitxer que conté el certificat de client"
-#: src/config/SSSDConfig/__init__.py.in:203
+#: src/config/SSSDConfig/__init__.py.in:213
msgid "File that contains the client key"
msgstr "Fitxer que conté la clau de client"
-#: src/config/SSSDConfig/__init__.py.in:204
+#: src/config/SSSDConfig/__init__.py.in:214
msgid "List of possible ciphers suites"
msgstr "Llista de paquets de xifrat possibles"
-#: src/config/SSSDConfig/__init__.py.in:205
+#: src/config/SSSDConfig/__init__.py.in:215
msgid "Require TLS certificate verification"
msgstr "Requereix verificació de certificat TLS"
-#: src/config/SSSDConfig/__init__.py.in:206
+#: src/config/SSSDConfig/__init__.py.in:216
msgid "Specify the sasl mechanism to use"
msgstr "Especifica el mecanisme sasl a utilitzar"
-#: src/config/SSSDConfig/__init__.py.in:207
+#: src/config/SSSDConfig/__init__.py.in:217
msgid "Specify the sasl authorization id to use"
msgstr "Escecifica l'id d'autorització sasl a utilitzar"
-#: src/config/SSSDConfig/__init__.py.in:208
+#: src/config/SSSDConfig/__init__.py.in:218
msgid "Specify the sasl authorization realm to use"
msgstr "Especifica el reialme d'autorització sasl a utilitzar"
-#: src/config/SSSDConfig/__init__.py.in:209
+#: src/config/SSSDConfig/__init__.py.in:219
msgid "Specify the minimal SSF for LDAP sasl authorization"
msgstr "Especifica el SSF mínim per autorització sasl de LDAP"
-#: src/config/SSSDConfig/__init__.py.in:210
+#: src/config/SSSDConfig/__init__.py.in:220
msgid "Kerberos service keytab"
msgstr "Clau de servei Kerberos"
-#: src/config/SSSDConfig/__init__.py.in:211
+#: src/config/SSSDConfig/__init__.py.in:221
msgid "Use Kerberos auth for LDAP connection"
msgstr "Utilitza autenticació Kerberos per la connexió LDAP"
-#: src/config/SSSDConfig/__init__.py.in:212
+#: src/config/SSSDConfig/__init__.py.in:222
msgid "Follow LDAP referrals"
msgstr "Segueix les referències LDAP"
-#: src/config/SSSDConfig/__init__.py.in:213
+#: src/config/SSSDConfig/__init__.py.in:223
msgid "Lifetime of TGT for LDAP connection"
msgstr "Temps de vida del TGT per la connexió LDAP"
-#: src/config/SSSDConfig/__init__.py.in:214
+#: src/config/SSSDConfig/__init__.py.in:224
msgid "How to dereference aliases"
msgstr "Com desreferenciar àlies"
-#: src/config/SSSDConfig/__init__.py.in:215
+#: src/config/SSSDConfig/__init__.py.in:225
msgid "Service name for DNS service lookups"
msgstr "Nom del servei per les peticions DNS"
-#: src/config/SSSDConfig/__init__.py.in:216
+#: src/config/SSSDConfig/__init__.py.in:226
msgid "The number of records to retrieve in a single LDAP query"
msgstr "El número de registres a recuperar en una sola petició LDAP"
-#: src/config/SSSDConfig/__init__.py.in:217
+#: src/config/SSSDConfig/__init__.py.in:227
msgid "The number of members that must be missing to trigger a full deref"
msgstr "El número de membres que han de faltar per activar una de-referència completa"
-#: src/config/SSSDConfig/__init__.py.in:218
+#: src/config/SSSDConfig/__init__.py.in:228
msgid ""
"Whether the LDAP library should perform a reverse lookup to canonicalize the"
" host name during a SASL bind"
msgstr "Si la biblioteca LDAP hauria de realitzar una petició inversa per canonalitzar el nom d'ordinador durant la connexió SASL"
-#: src/config/SSSDConfig/__init__.py.in:220
+#: src/config/SSSDConfig/__init__.py.in:230
msgid "entryUSN attribute"
msgstr "atribut entryUSN"
-#: src/config/SSSDConfig/__init__.py.in:221
+#: src/config/SSSDConfig/__init__.py.in:231
msgid "lastUSN attribute"
msgstr "atribut lastUSN"
-#: src/config/SSSDConfig/__init__.py.in:223
+#: src/config/SSSDConfig/__init__.py.in:233
msgid ""
"How long to retain a connection to the LDAP server before disconnecting"
msgstr "Quant temps s'ha de retenir una connexió al servidor LDAP abans de desconnectar"
-#: src/config/SSSDConfig/__init__.py.in:225
+#: src/config/SSSDConfig/__init__.py.in:235
msgid "Disable the LDAP paging control"
msgstr "Desactiva el control de paginació LDAP"
-#: src/config/SSSDConfig/__init__.py.in:226
+#: src/config/SSSDConfig/__init__.py.in:236
msgid "Disable Active Directory range retrieval"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:229
+#: src/config/SSSDConfig/__init__.py.in:239
msgid "Length of time to wait for a search request"
msgstr "Llargària de temps a esperar per una petició de cerca"
-#: src/config/SSSDConfig/__init__.py.in:230
+#: src/config/SSSDConfig/__init__.py.in:240
msgid "Length of time to wait for a enumeration request"
msgstr "Llargària de temps a esperar per una petició d'enumeració"
-#: src/config/SSSDConfig/__init__.py.in:231
+#: src/config/SSSDConfig/__init__.py.in:241
msgid "Length of time between enumeration updates"
msgstr "Llargària de temps entre actualitzacions d'enumeració"
-#: src/config/SSSDConfig/__init__.py.in:232
+#: src/config/SSSDConfig/__init__.py.in:242
msgid "Length of time between cache cleanups"
msgstr "Llargària de temps entre neteges del cau"
-#: src/config/SSSDConfig/__init__.py.in:233
+#: src/config/SSSDConfig/__init__.py.in:243
msgid "Require TLS for ID lookups"
msgstr "Requereix TLS per cerques d'ID"
-#: src/config/SSSDConfig/__init__.py.in:234
+#: src/config/SSSDConfig/__init__.py.in:244
msgid "Use ID-mapping of objectSID instead of pre-set IDs"
msgstr "Utilitza mapejat d'IDs enlloc de IDs pre-establerts"
-#: src/config/SSSDConfig/__init__.py.in:235
+#: src/config/SSSDConfig/__init__.py.in:245
msgid "Base DN for user lookups"
msgstr "DN base per cerques d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:236
+#: src/config/SSSDConfig/__init__.py.in:246
msgid "Scope of user lookups"
msgstr "Abast de les cerques d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:237
+#: src/config/SSSDConfig/__init__.py.in:247
msgid "Filter for user lookups"
msgstr "Filtre per les cerques d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:238
+#: src/config/SSSDConfig/__init__.py.in:248
msgid "Objectclass for users"
msgstr "Objectclass dels usuaris"
-#: src/config/SSSDConfig/__init__.py.in:239
+#: src/config/SSSDConfig/__init__.py.in:249
msgid "Username attribute"
msgstr "Atribut del nom d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:241
+#: src/config/SSSDConfig/__init__.py.in:251
msgid "UID attribute"
msgstr "Atribut de l'UID"
-#: src/config/SSSDConfig/__init__.py.in:242
+#: src/config/SSSDConfig/__init__.py.in:252
msgid "Primary GID attribute"
msgstr "Atribut del GID primari"
-#: src/config/SSSDConfig/__init__.py.in:243
+#: src/config/SSSDConfig/__init__.py.in:253
msgid "GECOS attribute"
msgstr "Atribut GECOS"
-#: src/config/SSSDConfig/__init__.py.in:244
+#: src/config/SSSDConfig/__init__.py.in:254
msgid "Home directory attribute"
msgstr "Atribut del directori d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:245
+#: src/config/SSSDConfig/__init__.py.in:255
msgid "Shell attribute"
msgstr "Atribut d'intèrpret d'ordres"
-#: src/config/SSSDConfig/__init__.py.in:246
+#: src/config/SSSDConfig/__init__.py.in:256
msgid "UUID attribute"
msgstr "Atribut de l'UUID"
-#: src/config/SSSDConfig/__init__.py.in:247
-#: src/config/SSSDConfig/__init__.py.in:283
+#: src/config/SSSDConfig/__init__.py.in:257
+#: src/config/SSSDConfig/__init__.py.in:294
msgid "objectSID attribute"
msgstr "Atribut de l'objectSID"
-#: src/config/SSSDConfig/__init__.py.in:248
+#: src/config/SSSDConfig/__init__.py.in:258
msgid "Active Directory primary group attribute for ID-mapping"
msgstr "Atribut del grup primari de l'Active Directory per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:249
+#: src/config/SSSDConfig/__init__.py.in:259
msgid "User principal attribute (for Kerberos)"
msgstr "Atribut d'usuari principal (per a Kerberos)"
-#: src/config/SSSDConfig/__init__.py.in:250
+#: src/config/SSSDConfig/__init__.py.in:260
msgid "Full Name"
msgstr "Nom complet"
-#: src/config/SSSDConfig/__init__.py.in:251
+#: src/config/SSSDConfig/__init__.py.in:261
msgid "memberOf attribute"
msgstr "Atribut de memberOf"
-#: src/config/SSSDConfig/__init__.py.in:252
+#: src/config/SSSDConfig/__init__.py.in:262
msgid "Modification time attribute"
msgstr "Atribut de data de modificació"
-#: src/config/SSSDConfig/__init__.py.in:254
+#: src/config/SSSDConfig/__init__.py.in:264
msgid "shadowLastChange attribute"
msgstr "Atribut de shadowLastChange"
-#: src/config/SSSDConfig/__init__.py.in:255
+#: src/config/SSSDConfig/__init__.py.in:265
msgid "shadowMin attribute"
msgstr "Atribut de shadowMin"
-#: src/config/SSSDConfig/__init__.py.in:256
+#: src/config/SSSDConfig/__init__.py.in:266
msgid "shadowMax attribute"
msgstr "Atribut de shadowMax"
-#: src/config/SSSDConfig/__init__.py.in:257
+#: src/config/SSSDConfig/__init__.py.in:267
msgid "shadowWarning attribute"
msgstr "Atribut de shadowWarning"
-#: src/config/SSSDConfig/__init__.py.in:258
+#: src/config/SSSDConfig/__init__.py.in:268
msgid "shadowInactive attribute"
msgstr "Atribut de shadowInactive"
-#: src/config/SSSDConfig/__init__.py.in:259
+#: src/config/SSSDConfig/__init__.py.in:269
msgid "shadowExpire attribute"
msgstr "Atribut de shadowExpire"
-#: src/config/SSSDConfig/__init__.py.in:260
+#: src/config/SSSDConfig/__init__.py.in:270
msgid "shadowFlag attribute"
msgstr "Atribut de shadowFlag"
-#: src/config/SSSDConfig/__init__.py.in:261
+#: src/config/SSSDConfig/__init__.py.in:271
msgid "Attribute listing authorized PAM services"
msgstr "Atribut que llista els serveis PAM autoritzats"
-#: src/config/SSSDConfig/__init__.py.in:262
+#: src/config/SSSDConfig/__init__.py.in:272
msgid "Attribute listing authorized server hosts"
msgstr "Atribut que llista els servidors autoritzats"
-#: src/config/SSSDConfig/__init__.py.in:263
+#: src/config/SSSDConfig/__init__.py.in:273
msgid "krbLastPwdChange attribute"
msgstr "Atribut de krbLastPwdChange"
-#: src/config/SSSDConfig/__init__.py.in:264
+#: src/config/SSSDConfig/__init__.py.in:274
msgid "krbPasswordExpiration attribute"
msgstr "Atribut de krbPasswordExpiration"
-#: src/config/SSSDConfig/__init__.py.in:265
+#: src/config/SSSDConfig/__init__.py.in:275
msgid "Attribute indicating that server side password policies are active"
msgstr "Atribut que indica l'activació de les polítiques de contrasenya de servidor"
-#: src/config/SSSDConfig/__init__.py.in:266
+#: src/config/SSSDConfig/__init__.py.in:276
msgid "accountExpires attribute of AD"
msgstr "Atribut de l'AD de accountExpires"
-#: src/config/SSSDConfig/__init__.py.in:267
+#: src/config/SSSDConfig/__init__.py.in:277
msgid "userAccountControl attribute of AD"
msgstr "Atribut de l'AD de userAccountControl"
-#: src/config/SSSDConfig/__init__.py.in:268
+#: src/config/SSSDConfig/__init__.py.in:278
msgid "nsAccountLock attribute"
msgstr "Atribut de nsAccountLock"
-#: src/config/SSSDConfig/__init__.py.in:269
+#: src/config/SSSDConfig/__init__.py.in:279
msgid "loginDisabled attribute of NDS"
msgstr "Atribut del NDS de loginDisabled"
-#: src/config/SSSDConfig/__init__.py.in:270
+#: src/config/SSSDConfig/__init__.py.in:280
msgid "loginExpirationTime attribute of NDS"
msgstr "Atribut del NDS de loginExpirationTime"
-#: src/config/SSSDConfig/__init__.py.in:271
+#: src/config/SSSDConfig/__init__.py.in:281
msgid "loginAllowedTimeMap attribute of NDS"
msgstr "Atribut del NDS de loginAllowedTimeMap"
-#: src/config/SSSDConfig/__init__.py.in:272
+#: src/config/SSSDConfig/__init__.py.in:282
msgid "SSH public key attribute"
msgstr "Atribut de la clau pública SSH"
-#: src/config/SSSDConfig/__init__.py.in:274
+#: src/config/SSSDConfig/__init__.py.in:283
+msgid "A list of extra attributes to download along with the user entry"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:285
msgid "Base DN for group lookups"
msgstr "DN base per cerques de grup"
-#: src/config/SSSDConfig/__init__.py.in:277
+#: src/config/SSSDConfig/__init__.py.in:288
msgid "Objectclass for groups"
msgstr "Objectclass per grups"
-#: src/config/SSSDConfig/__init__.py.in:278
+#: src/config/SSSDConfig/__init__.py.in:289
msgid "Group name"
msgstr "Nom del grup"
-#: src/config/SSSDConfig/__init__.py.in:279
+#: src/config/SSSDConfig/__init__.py.in:290
msgid "Group password"
msgstr "Contrasenya del grup"
-#: src/config/SSSDConfig/__init__.py.in:280
+#: src/config/SSSDConfig/__init__.py.in:291
msgid "GID attribute"
msgstr "Atribut GID"
-#: src/config/SSSDConfig/__init__.py.in:281
+#: src/config/SSSDConfig/__init__.py.in:292
msgid "Group member attribute"
msgstr "Atribut del membre de grup"
-#: src/config/SSSDConfig/__init__.py.in:282
+#: src/config/SSSDConfig/__init__.py.in:293
msgid "Group UUID attribute"
msgstr "Atribut de l'UUID de grup"
-#: src/config/SSSDConfig/__init__.py.in:284
+#: src/config/SSSDConfig/__init__.py.in:295
msgid "Modification time attribute for groups"
msgstr "Atribut de data de modificació per grups"
-#: src/config/SSSDConfig/__init__.py.in:286
+#: src/config/SSSDConfig/__init__.py.in:296
+msgid "Type of the group and other flags"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:298
msgid "Maximum nesting level SSSd will follow"
msgstr "El nivell d'imbricament màxim que seguirà l'SSSd"
-#: src/config/SSSDConfig/__init__.py.in:288
+#: src/config/SSSDConfig/__init__.py.in:300
msgid "Base DN for netgroup lookups"
msgstr "DN base per cerques de grups de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:289
+#: src/config/SSSDConfig/__init__.py.in:301
msgid "Objectclass for netgroups"
msgstr "Objectclass per grups de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:290
+#: src/config/SSSDConfig/__init__.py.in:302
msgid "Netgroup name"
msgstr "Nom de grup de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:291
+#: src/config/SSSDConfig/__init__.py.in:303
msgid "Netgroups members attribute"
msgstr "Atribut de membres de grup de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:292
+#: src/config/SSSDConfig/__init__.py.in:304
msgid "Netgroup triple attribute"
msgstr "Atribut triple de grup de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:293
+#: src/config/SSSDConfig/__init__.py.in:305
msgid "Netgroup UUID attribute"
msgstr "Atribut d'UUID de grup de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:294
+#: src/config/SSSDConfig/__init__.py.in:306
msgid "Modification time attribute for netgroups"
msgstr "Atribut de data de modificació de grups de xarxa"
-#: src/config/SSSDConfig/__init__.py.in:296
+#: src/config/SSSDConfig/__init__.py.in:308
msgid "Base DN for service lookups"
msgstr "DN base per cerques de serveis"
-#: src/config/SSSDConfig/__init__.py.in:297
+#: src/config/SSSDConfig/__init__.py.in:309
msgid "Objectclass for services"
msgstr "Objectclass per serveis"
-#: src/config/SSSDConfig/__init__.py.in:298
+#: src/config/SSSDConfig/__init__.py.in:310
msgid "Service name attribute"
msgstr "Atribut de nom de serveis"
-#: src/config/SSSDConfig/__init__.py.in:299
+#: src/config/SSSDConfig/__init__.py.in:311
msgid "Service port attribute"
msgstr "Atribut de port de serveis"
-#: src/config/SSSDConfig/__init__.py.in:300
+#: src/config/SSSDConfig/__init__.py.in:312
msgid "Service protocol attribute"
msgstr "Atribut de protocol de serveis"
-#: src/config/SSSDConfig/__init__.py.in:303
+#: src/config/SSSDConfig/__init__.py.in:315
msgid "Lower bound for ID-mapping"
msgstr "Límit inferior per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:304
+#: src/config/SSSDConfig/__init__.py.in:316
msgid "Upper bound for ID-mapping"
msgstr "Límit superior per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:305
+#: src/config/SSSDConfig/__init__.py.in:317
msgid "Number of IDs for each slice when ID-mapping"
msgstr "Número d'IDS per cada llesca en mapejar IDs"
-#: src/config/SSSDConfig/__init__.py.in:306
+#: src/config/SSSDConfig/__init__.py.in:318
msgid "Use autorid-compatible algorithm for ID-mapping"
msgstr "Utilitza l'algoritme compatible d'autorid per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:307
+#: src/config/SSSDConfig/__init__.py.in:319
msgid "Name of the default domain for ID-mapping"
msgstr "Nom del domini per defecte per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:308
+#: src/config/SSSDConfig/__init__.py.in:320
msgid "SID of the default domain for ID-mapping"
msgstr "SID del domini per defecte per mapejat d'IDs"
-#: src/config/SSSDConfig/__init__.py.in:310
+#: src/config/SSSDConfig/__init__.py.in:322
msgid "Use LDAP_MATCHING_RULE_IN_CHAIN for group lookups"
msgstr "Utilitza LDAP_MATCHING_RULE_IN_CHAIN per a cerques de grup"
-#: src/config/SSSDConfig/__init__.py.in:311
+#: src/config/SSSDConfig/__init__.py.in:323
msgid "Use LDAP_MATCHING_RULE_IN_CHAIN for initgroup lookups"
msgstr "Utilitza LDAP_MATCHING_RULE_IN_CHAIN per a cerques d'initgroup"
-#: src/config/SSSDConfig/__init__.py.in:312
+#: src/config/SSSDConfig/__init__.py.in:324
+msgid "Whether to use Token-Groups"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:325
msgid "Set lower boundary for allowed IDs from the LDAP server"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:313
+#: src/config/SSSDConfig/__init__.py.in:326
msgid "Set upper boundary for allowed IDs from the LDAP server"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:316
+#: src/config/SSSDConfig/__init__.py.in:329
msgid "Policy to evaluate the password expiration"
msgstr "Política per avaluar l'expiració de contrasenya"
-#: src/config/SSSDConfig/__init__.py.in:319
-msgid "LDAP filter to determine access privileges"
-msgstr "Filtre LDAP per determinar els privilegis d'accés"
-
-#: src/config/SSSDConfig/__init__.py.in:320
+#: src/config/SSSDConfig/__init__.py.in:333
msgid "Which attributes shall be used to evaluate if an account is expired"
msgstr "Quins atributs s'haurien d'utilitzar per avaluar si el compte està expirat"
-#: src/config/SSSDConfig/__init__.py.in:321
+#: src/config/SSSDConfig/__init__.py.in:334
msgid "Which rules should be used to evaluate access control"
msgstr "Quines regles s'haurien d'utilitzar per avaluar el control d'accés"
-#: src/config/SSSDConfig/__init__.py.in:324
+#: src/config/SSSDConfig/__init__.py.in:337
msgid "URI of an LDAP server where password changes are allowed"
msgstr "L'URI d'un servidor LDAP on es permeten els canvis de contrasenya"
-#: src/config/SSSDConfig/__init__.py.in:325
+#: src/config/SSSDConfig/__init__.py.in:338
msgid "URI of a backup LDAP server where password changes are allowed"
msgstr "URI d'un servidor LDAP reserva on es permet canvis de contrasenya"
-#: src/config/SSSDConfig/__init__.py.in:326
+#: src/config/SSSDConfig/__init__.py.in:339
msgid "DNS service name for LDAP password change server"
msgstr "Nom del servei DNS pel servidor LDAP de canvi de contrasenyes"
-#: src/config/SSSDConfig/__init__.py.in:327
+#: src/config/SSSDConfig/__init__.py.in:340
msgid ""
"Whether to update the ldap_user_shadow_last_change attribute after a "
"password change"
msgstr "Si voleu actualitzar l'atribut ldap_user_shadow_last_change després d'un canvi de contrasenya"
-#: src/config/SSSDConfig/__init__.py.in:330
+#: src/config/SSSDConfig/__init__.py.in:343
msgid "Base DN for sudo rules lookups"
msgstr "DN base per cerques de regles sudo"
-#: src/config/SSSDConfig/__init__.py.in:331
+#: src/config/SSSDConfig/__init__.py.in:344
msgid "Automatic full refresh period"
msgstr "Període d'actualització automàtica completa"
-#: src/config/SSSDConfig/__init__.py.in:332
+#: src/config/SSSDConfig/__init__.py.in:345
msgid "Automatic smart refresh period"
msgstr "Període d'actualització automàtica intel·ligent"
-#: src/config/SSSDConfig/__init__.py.in:333
+#: src/config/SSSDConfig/__init__.py.in:346
msgid "Whether to filter rules by hostname, IP addresses and network"
msgstr "Si voleu filtrar les normes per nom de màquina, adreça IP i xarxa"
-#: src/config/SSSDConfig/__init__.py.in:334
+#: src/config/SSSDConfig/__init__.py.in:347
msgid ""
"Hostnames and/or fully qualified domain names of this machine to filter sudo"
" rules"
msgstr "Noms de màquina i/o noms de domini plenament qualificat d'aquesta màquina per filtrar regles de sudo"
-#: src/config/SSSDConfig/__init__.py.in:335
+#: src/config/SSSDConfig/__init__.py.in:348
msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
msgstr "Adreces IPv4 o IPv6 o xarxa d'aquesta màquina per filtrar regles de sudo"
-#: src/config/SSSDConfig/__init__.py.in:336
+#: src/config/SSSDConfig/__init__.py.in:349
msgid "Whether to include rules that contains netgroup in host attribute"
msgstr "Si voleu incloure regles que contenen netgroup en l'atribut de màquina"
-#: src/config/SSSDConfig/__init__.py.in:337
+#: src/config/SSSDConfig/__init__.py.in:350
msgid ""
"Whether to include rules that contains regular expression in host attribute"
msgstr "Si voleu incloure regles que contenen expressions regulars en l'atribut de màquina"
-#: src/config/SSSDConfig/__init__.py.in:338
+#: src/config/SSSDConfig/__init__.py.in:351
msgid "Object class for sudo rules"
msgstr "Objectclass de les regles sudo"
-#: src/config/SSSDConfig/__init__.py.in:339
+#: src/config/SSSDConfig/__init__.py.in:352
msgid "Sudo rule name"
msgstr "Nom de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:340
+#: src/config/SSSDConfig/__init__.py.in:353
msgid "Sudo rule command attribute"
msgstr "Attribut de la comanda de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:341
+#: src/config/SSSDConfig/__init__.py.in:354
msgid "Sudo rule host attribute"
msgstr "Atribut de l'ordinador de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:342
+#: src/config/SSSDConfig/__init__.py.in:355
msgid "Sudo rule user attribute"
msgstr "Atribut de l'usuari de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:343
+#: src/config/SSSDConfig/__init__.py.in:356
msgid "Sudo rule option attribute"
msgstr "Atribut de l'opció de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:344
+#: src/config/SSSDConfig/__init__.py.in:357
msgid "Sudo rule runasuser attribute"
msgstr "Atribut de runasuser de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:345
+#: src/config/SSSDConfig/__init__.py.in:358
msgid "Sudo rule runasgroup attribute"
msgstr "Atribut de runasgroup de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:346
+#: src/config/SSSDConfig/__init__.py.in:359
msgid "Sudo rule notbefore attribute"
msgstr "Atribut de notbefore de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:347
+#: src/config/SSSDConfig/__init__.py.in:360
msgid "Sudo rule notafter attribute"
msgstr "Atribut de notafter de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:348
+#: src/config/SSSDConfig/__init__.py.in:361
msgid "Sudo rule order attribute"
msgstr "Atribut d'ordre de la regla sudo"
-#: src/config/SSSDConfig/__init__.py.in:351
+#: src/config/SSSDConfig/__init__.py.in:364
msgid "Object class for automounter maps"
msgstr "Objectclass dels mapes automounter"
-#: src/config/SSSDConfig/__init__.py.in:352
+#: src/config/SSSDConfig/__init__.py.in:365
msgid "Automounter map name attribute"
msgstr "Atribut del nom del mapa automounter"
-#: src/config/SSSDConfig/__init__.py.in:353
+#: src/config/SSSDConfig/__init__.py.in:366
msgid "Object class for automounter map entries"
msgstr "Objectclass de les entrades del mapa automounter"
-#: src/config/SSSDConfig/__init__.py.in:354
+#: src/config/SSSDConfig/__init__.py.in:367
msgid "Automounter map entry key attribute"
msgstr "Atribut de la clau d'entrada del mapa automounter"
-#: src/config/SSSDConfig/__init__.py.in:355
+#: src/config/SSSDConfig/__init__.py.in:368
msgid "Automounter map entry value attribute"
msgstr "Atribut del valor de l'entrada del mapa automounter"
-#: src/config/SSSDConfig/__init__.py.in:356
+#: src/config/SSSDConfig/__init__.py.in:369
msgid "Base DN for automounter map lookups"
msgstr "DN base per cerques del mapa automounter"
-#: src/config/SSSDConfig/__init__.py.in:359
+#: src/config/SSSDConfig/__init__.py.in:372
msgid "Comma separated list of allowed users"
msgstr "Llista separada per comes dels usuaris autoritzats"
-#: src/config/SSSDConfig/__init__.py.in:360
+#: src/config/SSSDConfig/__init__.py.in:373
msgid "Comma separated list of prohibited users"
msgstr "Llista separada per comes dels usuaris no autoritzats"
-#: src/config/SSSDConfig/__init__.py.in:363
+#: src/config/SSSDConfig/__init__.py.in:376
msgid "Default shell, /bin/bash"
msgstr "Intèrpret d'ordres per defecte, /bin/bash"
-#: src/config/SSSDConfig/__init__.py.in:364
+#: src/config/SSSDConfig/__init__.py.in:377
msgid "Base for home directories"
msgstr "Base pels directoris d'usuari"
-#: src/config/SSSDConfig/__init__.py.in:367
+#: src/config/SSSDConfig/__init__.py.in:380
msgid "The name of the NSS library to use"
msgstr "El nom de la biblioteca NSS a utilitzar"
-#: src/config/SSSDConfig/__init__.py.in:368
+#: src/config/SSSDConfig/__init__.py.in:381
msgid "Whether to look up canonical group name from cache if possible"
msgstr "Cercar nom de grup canònic al cau si és possible"
-#: src/config/SSSDConfig/__init__.py.in:371
+#: src/config/SSSDConfig/__init__.py.in:384
msgid "PAM stack to use"
msgstr "Pila PAM a utilitzar"
-#: src/monitor/monitor.c:2644
+#: src/monitor/monitor.c:2665
msgid "Become a daemon (default)"
msgstr "Esdevé un dimoni (per defecte)"
-#: src/monitor/monitor.c:2646
+#: src/monitor/monitor.c:2667
msgid "Run interactive (not a daemon)"
msgstr "Executa interactivament (no com a dimoni)"
-#: src/monitor/monitor.c:2648 src/tools/sss_debuglevel.c:71
+#: src/monitor/monitor.c:2669 src/tools/sss_debuglevel.c:71
msgid "Specify a non-default config file"
msgstr "Especifica un fitxer de configuració diferent al per defecte"
-#: src/monitor/monitor.c:2650
+#: src/monitor/monitor.c:2671
msgid "Print version number and exit"
msgstr "Imprimeix el número de versió i surt"
-#: src/providers/krb5/krb5_child.c:2167 src/providers/ldap/ldap_child.c:435
-#: src/util/util.h:93
+#: src/providers/krb5/krb5_child.c:1975 src/providers/ldap/ldap_child.c:435
+#: src/util/util.h:107
msgid "Debug level"
msgstr "Nivell de depuració"
-#: src/providers/krb5/krb5_child.c:2169 src/providers/ldap/ldap_child.c:437
-#: src/util/util.h:97
+#: src/providers/krb5/krb5_child.c:1977 src/providers/ldap/ldap_child.c:437
+#: src/util/util.h:111
msgid "Add debug timestamps"
msgstr "Afegeix marques de temps de depuració"
-#: src/providers/krb5/krb5_child.c:2171 src/providers/ldap/ldap_child.c:439
-#: src/util/util.h:99
+#: src/providers/krb5/krb5_child.c:1979 src/providers/ldap/ldap_child.c:439
+#: src/util/util.h:113
msgid "Show timestamps with microseconds"
msgstr "Mostra les marques de temps amb microsegons"
-#: src/providers/krb5/krb5_child.c:2173 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:1981 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Un descriptor de fitxer obert pels registres de depuració"
-#: src/providers/data_provider_be.c:2847
+#: src/providers/data_provider_be.c:2751
msgid "Domain of the information provider (mandatory)"
msgstr "Domini del proveïdor d'informació (obligatori)"
@@ -1143,74 +1182,80 @@ msgstr "Ha ocorregut un error però no es pot trobar cap descripció."
msgid "Unexpected error while looking for an error description"
msgstr "Error inesperat en cercar una descripció de l'error"
-#: src/sss_client/pam_sss.c:387
+#: src/sss_client/pam_sss.c:384
msgid "Passwords do not match"
msgstr "Les contrasenyes no coincideixen"
-#: src/sss_client/pam_sss.c:575
+#: src/sss_client/pam_sss.c:572
msgid "Password reset by root is not supported."
msgstr "La reinicialització de la contrasenya pel root no està suportada."
-#: src/sss_client/pam_sss.c:616
+#: src/sss_client/pam_sss.c:613
msgid "Authenticated with cached credentials"
msgstr "S'ha autenticat amb credencials del cau"
-#: src/sss_client/pam_sss.c:617
+#: src/sss_client/pam_sss.c:614
msgid ", your cached password will expire at: "
msgstr ", la seva contrasenya del cau expirarà el: "
-#: src/sss_client/pam_sss.c:647
+#: src/sss_client/pam_sss.c:644
#, c-format
msgid "Your password has expired. You have %1$d grace login(s) remaining."
msgstr "La seva contrasenya ha expirat. Teniu %1$d inici(s) de sessió de gràcia restants."
-#: src/sss_client/pam_sss.c:693
+#: src/sss_client/pam_sss.c:690
#, c-format
msgid "Your password will expire in %1$d %2$s."
msgstr "La vostra contrasenya expirarà en %1$d %2$s."
-#: src/sss_client/pam_sss.c:742
+#: src/sss_client/pam_sss.c:739
msgid "Authentication is denied until: "
msgstr "S'ha denegat l'autenticació fins: "
-#: src/sss_client/pam_sss.c:763
+#: src/sss_client/pam_sss.c:760
msgid "System is offline, password change not possible"
msgstr "El sistema es troba fora de línia, el canvi de contrasenya no és possible"
-#: src/sss_client/pam_sss.c:793 src/sss_client/pam_sss.c:806
+#: src/sss_client/pam_sss.c:775
+msgid ""
+"After changing the OTP password, you need to log out and back in order to "
+"acquire a ticket"
+msgstr ""
+
+#: src/sss_client/pam_sss.c:806 src/sss_client/pam_sss.c:819
msgid "Password change failed. "
msgstr "Ha fallat el canvi de contrasenya."
-#: src/sss_client/pam_sss.c:796 src/sss_client/pam_sss.c:807
+#: src/sss_client/pam_sss.c:809 src/sss_client/pam_sss.c:820
msgid "Server message: "
msgstr "Missatge del servidor: "
-#: src/sss_client/pam_sss.c:1231
+#: src/sss_client/pam_sss.c:1247
msgid "New Password: "
msgstr "Nova contrasenya: "
-#: src/sss_client/pam_sss.c:1232
+#: src/sss_client/pam_sss.c:1248
msgid "Reenter new Password: "
msgstr "Re-introduïu la nova contrasenya: "
-#: src/sss_client/pam_sss.c:1318
+#: src/sss_client/pam_sss.c:1338
msgid "Password: "
msgstr "Contrasenya: "
-#: src/sss_client/pam_sss.c:1350
+#: src/sss_client/pam_sss.c:1370
msgid "Current Password: "
msgstr "Contrasenya actual: "
-#: src/sss_client/pam_sss.c:1497
+#: src/sss_client/pam_sss.c:1537
msgid "Password expired. Change your password now."
msgstr "La contrasenya ha expirat. Canviau la vostra contrasenya ara."
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:192 src/tools/sss_useradd.c:48
#: src/tools/sss_groupadd.c:41 src/tools/sss_groupdel.c:44
-#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:652
+#: src/tools/sss_groupmod.c:42 src/tools/sss_groupshow.c:655
#: src/tools/sss_userdel.c:134 src/tools/sss_usermod.c:47
-#: src/tools/sss_cache.c:528 src/tools/sss_debuglevel.c:69
+#: src/tools/sss_cache.c:541 src/tools/sss_debuglevel.c:69
msgid "The debug level to run with"
msgstr "El nivell de depuració amb el que executar-se"
@@ -1219,11 +1264,11 @@ msgstr "El nivell de depuració amb el que executar-se"
msgid "The SSSD domain to use"
msgstr "El domini SSSD a utilitzar"
-#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:57 src/tools/sss_useradd.c:73
-#: src/tools/sss_groupadd.c:58 src/tools/sss_groupdel.c:53
-#: src/tools/sss_groupmod.c:65 src/tools/sss_groupshow.c:663
-#: src/tools/sss_userdel.c:151 src/tools/sss_usermod.c:74
-#: src/tools/sss_cache.c:561
+#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:57 src/tools/sss_useradd.c:74
+#: src/tools/sss_groupadd.c:59 src/tools/sss_groupdel.c:54
+#: src/tools/sss_groupmod.c:66 src/tools/sss_groupshow.c:667
+#: src/tools/sss_userdel.c:152 src/tools/sss_usermod.c:79
+#: src/tools/sss_cache.c:575
msgid "Error setting the locale\n"
msgstr "S'ha produït un error en establir la localització\n"
@@ -1287,95 +1332,95 @@ msgstr "No creis mai el directori de l'usuari, substitueix la configuració"
msgid "Specify an alternative skeleton directory"
msgstr "Especifica un directori d'esquelet alternatiu"
-#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
+#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:60
msgid "The SELinux user for user's login"
msgstr "L'usuari SELinux per l'inici de sessió de l'usuari"
-#: src/tools/sss_useradd.c:86 src/tools/sss_groupmod.c:78
-#: src/tools/sss_usermod.c:87
+#: src/tools/sss_useradd.c:87 src/tools/sss_groupmod.c:79
+#: src/tools/sss_usermod.c:92
msgid "Specify group to add to\n"
msgstr "Especifica el grup a afegir-se\n"
-#: src/tools/sss_useradd.c:110
+#: src/tools/sss_useradd.c:111
msgid "Specify user to add\n"
msgstr "Especifica l'usuari a afegir\n"
-#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
-#: src/tools/sss_groupdel.c:78 src/tools/sss_groupmod.c:111
-#: src/tools/sss_groupshow.c:696 src/tools/sss_userdel.c:196
-#: src/tools/sss_usermod.c:128
+#: src/tools/sss_useradd.c:121 src/tools/sss_groupadd.c:86
+#: src/tools/sss_groupdel.c:80 src/tools/sss_groupmod.c:113
+#: src/tools/sss_groupshow.c:701 src/tools/sss_userdel.c:198
+#: src/tools/sss_usermod.c:162
msgid "Error initializing the tools - no local domain\n"
msgstr "S'ha produït un error en inicialitzar les eines - no hi ha cap domini local\n"
-#: src/tools/sss_useradd.c:121 src/tools/sss_groupadd.c:86
-#: src/tools/sss_groupdel.c:80 src/tools/sss_groupmod.c:113
-#: src/tools/sss_groupshow.c:698 src/tools/sss_userdel.c:198
-#: src/tools/sss_usermod.c:130
+#: src/tools/sss_useradd.c:123 src/tools/sss_groupadd.c:88
+#: src/tools/sss_groupdel.c:82 src/tools/sss_groupmod.c:115
+#: src/tools/sss_groupshow.c:703 src/tools/sss_userdel.c:200
+#: src/tools/sss_usermod.c:164
msgid "Error initializing the tools\n"
msgstr "S'ha produït un error en inicialitzar les eines\n"
-#: src/tools/sss_useradd.c:130 src/tools/sss_groupadd.c:95
-#: src/tools/sss_groupdel.c:89 src/tools/sss_groupmod.c:121
-#: src/tools/sss_groupshow.c:707 src/tools/sss_userdel.c:207
-#: src/tools/sss_usermod.c:139
+#: src/tools/sss_useradd.c:132 src/tools/sss_groupadd.c:97
+#: src/tools/sss_groupdel.c:91 src/tools/sss_groupmod.c:123
+#: src/tools/sss_groupshow.c:712 src/tools/sss_userdel.c:209
+#: src/tools/sss_usermod.c:173
msgid "Invalid domain specified in FQDN\n"
msgstr "S'ha especificat un domini invàlid al FQDN\n"
-#: src/tools/sss_useradd.c:139 src/tools/sss_groupmod.c:141
-#: src/tools/sss_groupmod.c:168 src/tools/sss_usermod.c:162
-#: src/tools/sss_usermod.c:189
+#: src/tools/sss_useradd.c:142 src/tools/sss_groupmod.c:144
+#: src/tools/sss_groupmod.c:173 src/tools/sss_usermod.c:197
+#: src/tools/sss_usermod.c:226
msgid "Internal error while parsing parameters\n"
msgstr "S'ha produït un error intern en analitzar els paràmetres\n"
-#: src/tools/sss_useradd.c:147 src/tools/sss_usermod.c:170
-#: src/tools/sss_usermod.c:197
+#: src/tools/sss_useradd.c:151 src/tools/sss_usermod.c:206
+#: src/tools/sss_usermod.c:235
msgid "Groups must be in the same domain as user\n"
msgstr "Els grups han d'ésser al mateix domini que l'usuari\n"
-#: src/tools/sss_useradd.c:155
+#: src/tools/sss_useradd.c:159
#, c-format
msgid "Cannot find group %1$s in local domain\n"
msgstr "No es pot trobar el grup %1$s al domini local\n"
-#: src/tools/sss_useradd.c:170 src/tools/sss_userdel.c:217
+#: src/tools/sss_useradd.c:174 src/tools/sss_userdel.c:219
msgid "Cannot set default values\n"
msgstr "No es poden establir els valors per defecte\n"
-#: src/tools/sss_useradd.c:177 src/tools/sss_usermod.c:153
+#: src/tools/sss_useradd.c:181 src/tools/sss_usermod.c:187
msgid "The selected UID is outside the allowed range\n"
msgstr "L'UID seleccionat es troba fora del rang permès\n"
-#: src/tools/sss_useradd.c:206 src/tools/sss_usermod.c:264
+#: src/tools/sss_useradd.c:210 src/tools/sss_usermod.c:305
msgid "Cannot set SELinux login context\n"
msgstr "No es pot establir el context d'inici de sessió de SELinux\n"
-#: src/tools/sss_useradd.c:221
+#: src/tools/sss_useradd.c:224
msgid "Cannot get info about the user\n"
msgstr "No es pot obtenir la informació sobre l'usuari\n"
-#: src/tools/sss_useradd.c:233
+#: src/tools/sss_useradd.c:236
msgid "User's home directory already exists, not copying data from skeldir\n"
msgstr "El directori d'usuari ja existeix, no es copiaran les dades del directori esquelet\n"
-#: src/tools/sss_useradd.c:236
+#: src/tools/sss_useradd.c:239
#, c-format
msgid "Cannot create user's home directory: %1$s\n"
msgstr "No es pot crear el directori de l'usuari: %1$s\n"
-#: src/tools/sss_useradd.c:247
+#: src/tools/sss_useradd.c:250
#, c-format
msgid "Cannot create user's mail spool: %1$s\n"
msgstr "No es pot crear la gestió de cues del correu de l'usuari: %1$s\n"
-#: src/tools/sss_useradd.c:266
+#: src/tools/sss_useradd.c:270
msgid "Could not allocate ID for the user - domain full?\n"
msgstr "No s'ha pogut assignar un ID per l'usuari - és ple el domini?\n"
-#: src/tools/sss_useradd.c:270
+#: src/tools/sss_useradd.c:274
msgid "A user or group with the same name or ID already exists\n"
msgstr "Ja existeix un usuari o grup amb el mateix nom o ID\n"
-#: src/tools/sss_useradd.c:276
+#: src/tools/sss_useradd.c:280
msgid "Transaction error. Could not add user.\n"
msgstr "S'ha produït un error de transacció. No s'ha pogut afegir l'usuari\n"
@@ -1383,50 +1428,50 @@ msgstr "S'ha produït un error de transacció. No s'ha pogut afegir l'usuari\n"
msgid "The GID of the group"
msgstr "El GID del grup"
-#: src/tools/sss_groupadd.c:75
+#: src/tools/sss_groupadd.c:76
msgid "Specify group to add\n"
msgstr "Especifica el grup a afegir\n"
-#: src/tools/sss_groupadd.c:104 src/tools/sss_groupmod.c:192
+#: src/tools/sss_groupadd.c:106 src/tools/sss_groupmod.c:198
msgid "The selected GID is outside the allowed range\n"
msgstr "El GID seleccionat és fora del rang permès\n"
-#: src/tools/sss_groupadd.c:141
+#: src/tools/sss_groupadd.c:143
msgid "Could not allocate ID for the group - domain full?\n"
msgstr "No s'ha pogut assignar un ID pel grup - és ple el domini?\n"
-#: src/tools/sss_groupadd.c:145
+#: src/tools/sss_groupadd.c:147
msgid "A group with the same name or GID already exists\n"
msgstr "Ja existeix un grup amb el mateix nom o GID\n"
-#: src/tools/sss_groupadd.c:150
+#: src/tools/sss_groupadd.c:153
msgid "Transaction error. Could not add group.\n"
msgstr "S'ha produït un error en la transacció. No s'ha pogut afegir el grup.\n"
-#: src/tools/sss_groupdel.c:69
+#: src/tools/sss_groupdel.c:70
msgid "Specify group to delete\n"
msgstr "Especificau el grup a eliminar\n"
-#: src/tools/sss_groupdel.c:102
+#: src/tools/sss_groupdel.c:104
#, c-format
msgid "Group %1$s is outside the defined ID range for domain\n"
msgstr "El grup %1$s es troba fora del rand d'IDs definit pel domini\n"
-#: src/tools/sss_groupdel.c:117 src/tools/sss_groupmod.c:219
-#: src/tools/sss_groupmod.c:226 src/tools/sss_groupmod.c:233
-#: src/tools/sss_userdel.c:294 src/tools/sss_usermod.c:241
-#: src/tools/sss_usermod.c:248 src/tools/sss_usermod.c:255
+#: src/tools/sss_groupdel.c:119 src/tools/sss_groupmod.c:225
+#: src/tools/sss_groupmod.c:232 src/tools/sss_groupmod.c:239
+#: src/tools/sss_userdel.c:295 src/tools/sss_usermod.c:282
+#: src/tools/sss_usermod.c:289 src/tools/sss_usermod.c:296
#, c-format
msgid "NSS request failed (%1$d). Entry might remain in memory cache.\n"
msgstr ""
-#: src/tools/sss_groupdel.c:129
+#: src/tools/sss_groupdel.c:132
msgid ""
"No such group in local domain. Removing groups only allowed in local "
"domain.\n"
msgstr "No existeix el grup al domini local. L'eliminació de grups només es permet al domini local.\n"
-#: src/tools/sss_groupdel.c:134
+#: src/tools/sss_groupdel.c:137
msgid "Internal error. Could not remove group.\n"
msgstr "S'ha produït un error intern. No s'ha pogut eliminar el grup.\n"
@@ -1438,92 +1483,92 @@ msgstr "Grups als que afegir aquest grup"
msgid "Groups to remove this group from"
msgstr "Grups dels que s'ha d'eliminar aquest grup"
-#: src/tools/sss_groupmod.c:86 src/tools/sss_usermod.c:95
+#: src/tools/sss_groupmod.c:87 src/tools/sss_usermod.c:100
msgid "Specify group to remove from\n"
msgstr "Especifica el grup del que s'ha d'eliminar\n"
-#: src/tools/sss_groupmod.c:100
+#: src/tools/sss_groupmod.c:101
msgid "Specify group to modify\n"
msgstr "Especifica el grup a modificar\n"
-#: src/tools/sss_groupmod.c:128
+#: src/tools/sss_groupmod.c:130
msgid ""
"Cannot find group in local domain, modifying groups is allowed only in local"
" domain\n"
msgstr "No es pot trobar el grup al domini local, la modificació de grups només es permet al domini local\n"
-#: src/tools/sss_groupmod.c:149 src/tools/sss_groupmod.c:176
+#: src/tools/sss_groupmod.c:153 src/tools/sss_groupmod.c:182
msgid "Member groups must be in the same domain as parent group\n"
msgstr "Els grups membres han d'esser al mateix domini que els grups pare\n"
-#: src/tools/sss_groupmod.c:157 src/tools/sss_groupmod.c:184
-#: src/tools/sss_usermod.c:178 src/tools/sss_usermod.c:205
+#: src/tools/sss_groupmod.c:161 src/tools/sss_groupmod.c:190
+#: src/tools/sss_usermod.c:214 src/tools/sss_usermod.c:243
#, c-format
msgid ""
"Cannot find group %1$s in local domain, only groups in local domain are "
"allowed\n"
msgstr "No s'ha pogut trobar el grup %1$s al domini local, només es permeten els grups al domini local\n"
-#: src/tools/sss_groupmod.c:250
+#: src/tools/sss_groupmod.c:257
msgid "Could not modify group - check if member group names are correct\n"
msgstr "No s'ha pogut modificar el grup - comprovau si els noms dels membres del grup són correctes\n"
-#: src/tools/sss_groupmod.c:254
+#: src/tools/sss_groupmod.c:261
msgid "Could not modify group - check if groupname is correct\n"
msgstr "No s'ha pogut modificar el grup - comprovau si el nom de grup és correcte\n"
-#: src/tools/sss_groupmod.c:258
+#: src/tools/sss_groupmod.c:265
msgid "Transaction error. Could not modify group.\n"
msgstr "S'ha produït un error en la transacció. No s'ha pogut modificar el grup.\n"
-#: src/tools/sss_groupshow.c:599
+#: src/tools/sss_groupshow.c:602
#, c-format
msgid "%1$s%2$sGroup: %3$s\n"
msgstr "%1$s%2$sGrup: %3$s\n"
-#: src/tools/sss_groupshow.c:600
+#: src/tools/sss_groupshow.c:603
msgid "Magic Private "
msgstr "Privat màgic "
-#: src/tools/sss_groupshow.c:602
+#: src/tools/sss_groupshow.c:605
#, c-format
msgid "%1$sGID number: %2$d\n"
msgstr "%1$sNúmero GID: %2$d\n"
-#: src/tools/sss_groupshow.c:604
+#: src/tools/sss_groupshow.c:607
#, c-format
msgid "%1$sMember users: "
msgstr "%1$sUsuaris membre: "
-#: src/tools/sss_groupshow.c:611
+#: src/tools/sss_groupshow.c:614
#, c-format
msgid ""
"\n"
"%1$sIs a member of: "
msgstr "\n%1$sÉs un membre de: "
-#: src/tools/sss_groupshow.c:618
+#: src/tools/sss_groupshow.c:621
#, c-format
msgid ""
"\n"
"%1$sMember groups: "
msgstr "\n%1$sGrups membre: "
-#: src/tools/sss_groupshow.c:654
+#: src/tools/sss_groupshow.c:657
msgid "Print indirect group members recursively"
msgstr "Imprimeix els membres de grup indirectes recursivament"
-#: src/tools/sss_groupshow.c:687
+#: src/tools/sss_groupshow.c:691
msgid "Specify group to show\n"
msgstr "Especifica el grup a mostrar\n"
-#: src/tools/sss_groupshow.c:726
+#: src/tools/sss_groupshow.c:731
msgid ""
"No such group in local domain. Printing groups only allowed in local "
"domain.\n"
msgstr "No s'ha trobat el grup al domini local. L'impressió de grups només es permet al domini local.\n"
-#: src/tools/sss_groupshow.c:731
+#: src/tools/sss_groupshow.c:736
msgid "Internal error. Could not print group.\n"
msgstr "S'ha produït un error intern. No es pot imprimir el grup.\n"
@@ -1543,52 +1588,52 @@ msgstr "Força l'eliminació de fitxers que no són propietat de l'usuari"
msgid "Kill users' processes before removing him"
msgstr "Mata els processos de l'usuari abans d'eliminar-lo"
-#: src/tools/sss_userdel.c:187
+#: src/tools/sss_userdel.c:188
msgid "Specify user to delete\n"
msgstr "Especifica l'usuari a eliminar\n"
-#: src/tools/sss_userdel.c:233
+#: src/tools/sss_userdel.c:234
#, c-format
msgid "User %1$s is outside the defined ID range for domain\n"
msgstr "L'usuari %1$s és fora del rang d'IDs del domini\n"
-#: src/tools/sss_userdel.c:258
+#: src/tools/sss_userdel.c:259
msgid "Cannot reset SELinux login context\n"
msgstr "No es pot reiniciar el context d'inici de sessió de SELinux\n"
-#: src/tools/sss_userdel.c:270
+#: src/tools/sss_userdel.c:271
#, c-format
msgid "WARNING: The user (uid %1$lu) was still logged in when deleted.\n"
msgstr "ATENCIÓ: L'usuari (uid %1$lu) era encara a la sessió quan es va eliminar\n"
-#: src/tools/sss_userdel.c:275
+#: src/tools/sss_userdel.c:276
msgid "Cannot determine if the user was logged in on this platform"
msgstr "No es pot determinar si l'usuari tenia la sessió iniciada a aquesta plataforma"
-#: src/tools/sss_userdel.c:280
+#: src/tools/sss_userdel.c:281
msgid "Error while checking if the user was logged in\n"
msgstr "S'ha produït un error en comprovar si l'usuari havia iniciat la sessió\n"
-#: src/tools/sss_userdel.c:287
+#: src/tools/sss_userdel.c:288
#, c-format
msgid "The post-delete command failed: %1$s\n"
msgstr "La comanda post-eliminació ha fallat: %1$s\n"
-#: src/tools/sss_userdel.c:307
+#: src/tools/sss_userdel.c:308
msgid "Not removing home dir - not owned by user\n"
msgstr "No s'ha eliminat el directori de l'usuari - no és propietat de l'usuari\n"
-#: src/tools/sss_userdel.c:309
+#: src/tools/sss_userdel.c:310
#, c-format
msgid "Cannot remove homedir: %1$s\n"
msgstr "No es pot eliminar el directori d'usuari: %1$s\n"
-#: src/tools/sss_userdel.c:322
+#: src/tools/sss_userdel.c:324
msgid ""
"No such user in local domain. Removing users only allowed in local domain.\n"
msgstr "No s'ha trobat l'usuari al domini local. L'eliminació d'usuaris només es permet al domini local.\n"
-#: src/tools/sss_userdel.c:327
+#: src/tools/sss_userdel.c:329
msgid "Internal error. Could not remove user.\n"
msgstr "S'ha produït un error intern. No s'ha pogut eliminar l'usuari.\n"
@@ -1612,102 +1657,121 @@ msgstr "Bloqueja aquest compte"
msgid "Unlock the account"
msgstr "Desbloqueja aquest compte"
-#: src/tools/sss_usermod.c:119
+#: src/tools/sss_usermod.c:57
+msgid "Add an attribute/value pair. The format is attrname=value."
+msgstr ""
+
+#: src/tools/sss_usermod.c:58
+msgid "Delete an attribute/value pair. The format is attrname=value."
+msgstr ""
+
+#: src/tools/sss_usermod.c:59
+msgid ""
+"Set an attribute to a name/value pair. The format is attrname=value. For "
+"multi-valued attributes, the command replaces the values already present"
+msgstr ""
+
+#: src/tools/sss_usermod.c:117 src/tools/sss_usermod.c:126
+#: src/tools/sss_usermod.c:135
+msgid "Specify the attribute name/value pair(s)\n"
+msgstr ""
+
+#: src/tools/sss_usermod.c:152
msgid "Specify user to modify\n"
msgstr "Especifica l'usuari a modificar\n"
-#: src/tools/sss_usermod.c:146
+#: src/tools/sss_usermod.c:180
msgid ""
"Cannot find user in local domain, modifying users is allowed only in local "
"domain\n"
msgstr "No es pot trobar l'usuari al domini local, la modificació d'usuaris només es permet al domini local\n"
-#: src/tools/sss_usermod.c:281
+#: src/tools/sss_usermod.c:322
msgid "Could not modify user - check if group names are correct\n"
msgstr "No s'ha pogut modificar l'usuari - comprovau si els noms dels grups són correctes\n"
-#: src/tools/sss_usermod.c:285
+#: src/tools/sss_usermod.c:326
msgid "Could not modify user - user already member of groups?\n"
msgstr "No s'ha pogut modificar l'usuari - l'usuari ja pertany als grups?\n"
-#: src/tools/sss_usermod.c:289
+#: src/tools/sss_usermod.c:330
msgid "Transaction error. Could not modify user.\n"
msgstr "S'ha produït un error en la transacció. No s'ha pogut modificar l'usuari.\n"
-#: src/tools/sss_cache.c:171
+#: src/tools/sss_cache.c:169
msgid "No cache object matched the specified search\n"
msgstr "Cap objecte cau ha coincidit amb la cerca especificada\n"
-#: src/tools/sss_cache.c:400
+#: src/tools/sss_cache.c:394
#, c-format
msgid "Couldn't invalidate %1$s"
msgstr "No s'ha pogut invalidar %1$s"
-#: src/tools/sss_cache.c:407
+#: src/tools/sss_cache.c:401
#, c-format
msgid "Couldn't invalidate %1$s %2$s"
msgstr "No s'ha pogut invalidar %1$s %2$s"
-#: src/tools/sss_cache.c:530
-msgid "Invalidate all cached entries except for sudo rulese"
+#: src/tools/sss_cache.c:543
+msgid "Invalidate all cached entries except for sudo rules"
msgstr ""
-#: src/tools/sss_cache.c:532
+#: src/tools/sss_cache.c:545
msgid "Invalidate particular user"
msgstr "Invalida l'usuari particular"
-#: src/tools/sss_cache.c:534
+#: src/tools/sss_cache.c:547
msgid "Invalidate all users"
msgstr "Invalida tots els usuaris"
-#: src/tools/sss_cache.c:536
+#: src/tools/sss_cache.c:549
msgid "Invalidate particular group"
msgstr "Invalida el grup particular"
-#: src/tools/sss_cache.c:538
+#: src/tools/sss_cache.c:551
msgid "Invalidate all groups"
msgstr "Invalida tots els grups"
-#: src/tools/sss_cache.c:540
+#: src/tools/sss_cache.c:553
msgid "Invalidate particular netgroup"
msgstr "Invalida el grup de xarxa particular"
-#: src/tools/sss_cache.c:542
+#: src/tools/sss_cache.c:555
msgid "Invalidate all netgroups"
msgstr "Invalida tots els grups de xarxa"
-#: src/tools/sss_cache.c:544
+#: src/tools/sss_cache.c:557
msgid "Invalidate particular service"
msgstr "Invalida el servei particular"
-#: src/tools/sss_cache.c:546
+#: src/tools/sss_cache.c:559
msgid "Invalidate all services"
msgstr "Invalida tots els serveis"
-#: src/tools/sss_cache.c:549
+#: src/tools/sss_cache.c:562
msgid "Invalidate particular autofs map"
msgstr "Invalida el mapa autofs particular"
-#: src/tools/sss_cache.c:551
+#: src/tools/sss_cache.c:564
msgid "Invalidate all autofs maps"
msgstr "Invalida tots els mapes autofs"
-#: src/tools/sss_cache.c:554
+#: src/tools/sss_cache.c:567
msgid "Only invalidate entries from a particular domain"
msgstr "Invalida les entrades només d'un domini particular"
-#: src/tools/sss_cache.c:599
+#: src/tools/sss_cache.c:613
msgid "Please select at least one object to invalidate\n"
msgstr "Si us plau, seleccionau al menys un objecte per invalidar\n"
-#: src/tools/sss_cache.c:669
+#: src/tools/sss_cache.c:684
#, c-format
msgid ""
"Could not open domain %1$s. If the domain is a subdomain (trusted domain), "
"use fully qualified name instead of --domain/-d parameter.\n"
msgstr ""
-#: src/tools/sss_cache.c:673
+#: src/tools/sss_cache.c:688
msgid "Could not open available domains\n"
msgstr "No s'han pogut obrir els dominis disponibles\n"
@@ -1723,12 +1787,12 @@ msgstr "Especificau el nivell de depuració que voleu establir\n"
msgid "Only one argument expected\n"
msgstr ""
-#: src/tools/tools_util.c:200
+#: src/tools/tools_util.c:204
#, c-format
msgid "Name '%1$s' does not seem to be FQDN ('%2$s = TRUE' is set)\n"
msgstr ""
-#: src/tools/tools_util.c:303
+#: src/tools/tools_util.c:309
msgid "Out of memory\n"
msgstr "Sense memòria\n"
@@ -1737,6 +1801,6 @@ msgstr "Sense memòria\n"
msgid "%1$s must be run as root\n"
msgstr "S'ha d'executar %1$s com a root\n"
-#: src/util/util.h:95
+#: src/util/util.h:109
msgid "Send the debug output to files instead of stderr"
msgstr "Envia la sortida de depuració a fitxers enlloc d'stderr"
diff --git a/po/de.po b/po/de.po
index 53faf2471..800ee53c7 100644
--- a/po/de.po
+++ b/po/de.po
@@ -4,15 +4,16 @@
#
# Translators:
# Fabian Affolter <fab@fedoraproject.org>, 2011
+# Mario Blättermann <mario.blaettermann@gmail.com>, 2014
# sgallagh <sgallagh@redhat.com>, 2011
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
-"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: German (http://www.transifex.com/projects/p/fedora/language/"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-08 15:50+0000\n"
+"Last-Translator: Mario Blättermann <mario.blaettermann@gmail.com>\n"
+"Language-Team: German (http://www.transifex.com/projects/p/sssd/language/"
"de/)\n"
"Language: de\n"
"MIME-Version: 1.0\n"
@@ -22,44 +23,48 @@ msgstr ""
#: src/config/SSSDConfig/__init__.py.in:39
msgid "Set the verbosity of the debug logging"
-msgstr ""
+msgstr "Ausführlichkeitsstufe der Fehlerdiagnose festlegen"
#: src/config/SSSDConfig/__init__.py.in:40
msgid "Include timestamps in debug logs"
-msgstr ""
+msgstr "Zeitstempel in Fehlerdiagnoseprotokollen einschließen"
#: src/config/SSSDConfig/__init__.py.in:41
msgid "Include microseconds in timestamps in debug logs"
-msgstr ""
+msgstr "Mikrosekunden in Zeitstempeln der Debug-Protokolle einschließen"
#: src/config/SSSDConfig/__init__.py.in:42
msgid "Write debug messages to logfiles"
-msgstr ""
+msgstr "Fehlerdiagnosemeldungen in Protokolldateien schreiben"
#: src/config/SSSDConfig/__init__.py.in:43
msgid "Ping timeout before restarting service"
-msgstr ""
+msgstr "Ping-Zeitspanne vor dem Neustart des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:44
msgid ""
"Timeout between three failed ping checks and forcibly killing the service"
msgstr ""
+"Zeitspanne zwischen der dritten fehlgeschlagenen Ping-Prüfung und dem "
+"erzwungenen Beenden des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:45
msgid "Command to start service"
-msgstr ""
+msgstr "Befehl zum Starten des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:46
msgid "Number of times to attempt connection to Data Providers"
-msgstr ""
+msgstr "Anzahl der Verbindungsversuche zum Datenanbieter"
#: src/config/SSSDConfig/__init__.py.in:47
msgid "The number of file descriptors that may be opened by this responder"
msgstr ""
+"Die Anzahl der Dateideskriptoren, die durch diesen Responder geöffnet werden "
+"dürfen"
#: src/config/SSSDConfig/__init__.py.in:48
msgid "Idle time before automatic disconnection of a client"
-msgstr ""
+msgstr "Untätige Zeit vor der automatischen Verbindungstrennung eines Clients "
#: src/config/SSSDConfig/__init__.py.in:51
msgid "SSSD Services to start"
@@ -71,194 +76,225 @@ msgstr "SSSD-Domains zum Starten"
#: src/config/SSSDConfig/__init__.py.in:53
msgid "Timeout for messages sent over the SBUS"
-msgstr ""
+msgstr "Zeitüberschreitung für Meldungen, die über SBUS gesendet werden"
#: src/config/SSSDConfig/__init__.py.in:54
msgid "Regex to parse username and domain"
-msgstr ""
+msgstr "Regulärer Ausdruck zum Verarbeiten von Benutzername und Domain"
#: src/config/SSSDConfig/__init__.py.in:55
msgid "Printf-compatible format for displaying fully-qualified names"
msgstr ""
+"Printf-kompatibles Format für die Darstellung voll ausgeschriebener Namen"
#: src/config/SSSDConfig/__init__.py.in:56
msgid ""
"Directory on the filesystem where SSSD should store Kerberos replay cache "
"files."
msgstr ""
+"Verzeichnis im Dateisystem, in welchem SSSD Anwort-Zwischenspeicher-Dateien "
+"ablegt."
#: src/config/SSSDConfig/__init__.py.in:57
msgid "Domain to add to names without a domain component."
-msgstr ""
+msgstr "Domain, die zu Namen ohne Domain-Komponente hinzugefügt werden soll."
#: src/config/SSSDConfig/__init__.py.in:60
msgid "Enumeration cache timeout length (seconds)"
-msgstr ""
+msgstr "Zeitspanne für den Aufzählungs-Zwischenspeicher (Sekunden)"
#: src/config/SSSDConfig/__init__.py.in:61
msgid "Entry cache background update timeout length (seconds)"
msgstr ""
+"Zeitspanne für die Aktualisierung des Eintrags-Zwischenspeichers (Sekunden)"
#: src/config/SSSDConfig/__init__.py.in:62
#: src/config/SSSDConfig/__init__.py.in:88
msgid "Negative cache timeout length (seconds)"
-msgstr ""
+msgstr "Zeitspanne für den negativen Zwischenspeicher (Sekunden)"
#: src/config/SSSDConfig/__init__.py.in:63
msgid "Users that SSSD should explicitly ignore"
-msgstr ""
+msgstr "Benutzer, die SSSD ausdrücklich ignorieren soll"
#: src/config/SSSDConfig/__init__.py.in:64
msgid "Groups that SSSD should explicitly ignore"
-msgstr ""
+msgstr "Gruppen, die SSSD ausdrücklich ignorieren soll"
#: src/config/SSSDConfig/__init__.py.in:65
msgid "Should filtered users appear in groups"
-msgstr ""
+msgstr "Anzeige von gefilterten Benutzern in Gruppen"
#: src/config/SSSDConfig/__init__.py.in:66
msgid "The value of the password field the NSS provider should return"
msgstr ""
+"Der Wert des Passwort-Feldes, das der NSS-Dienstanbieter zurückgeben sollte"
#: src/config/SSSDConfig/__init__.py.in:67
msgid "Override homedir value from the identity provider with this value"
msgstr ""
+"homedir-Wert des Identitäts-Anbieters wird durch diesen Wert außer Kraft "
+"gesetzt"
#: src/config/SSSDConfig/__init__.py.in:68
msgid ""
"Substitute empty homedir value from the identity provider with this value"
msgstr ""
+"Leerer homedir-Wert des Identitäts-Anbieters wird durch diesen Wert ersetzt"
#: src/config/SSSDConfig/__init__.py.in:69
msgid "Override shell value from the identity provider with this value"
msgstr ""
+"Shell-Wert des Identitäts-Anbieters wird durch diesen Wert außer Kraft "
+"gesetzt"
#: src/config/SSSDConfig/__init__.py.in:70
msgid "The list of shells users are allowed to log in with"
-msgstr ""
+msgstr "Liste der Shells, mit denen sich der Benutzer anmelden darf"
#: src/config/SSSDConfig/__init__.py.in:71
msgid ""
"The list of shells that will be vetoed, and replaced with the fallback shell"
msgstr ""
+"Die Liste der Shells, die abgewiesen und durch eine Ausweich-Shell ersetzt "
+"werden"
#: src/config/SSSDConfig/__init__.py.in:72
msgid ""
"If a shell stored in central directory is allowed but not available, use "
"this fallback"
msgstr ""
+"Falls eine Shell im zentralen Verzeichnis zugelassen, aber nicht verfügbar "
+"ist, wird auf diese ausgewichen"
#: src/config/SSSDConfig/__init__.py.in:73
msgid "Shell to use if the provider does not list one"
-msgstr ""
+msgstr "Zu verwendende Shell, wenn der Anbieter keine auflistet"
#: src/config/SSSDConfig/__init__.py.in:74
msgid "How long will be in-memory cache records valid"
-msgstr ""
+msgstr "Gültigkeitsdauer der speichereigenen Zwischenspeicher-Datensätze"
#: src/config/SSSDConfig/__init__.py.in:77
msgid "How long to allow cached logins between online logins (days)"
msgstr ""
+"Gibt die Anzahl der Tage an, für die zwischengespeicherte Anmeldungen "
+"zwischen Online-Anmeldungen zulässig sind"
#: src/config/SSSDConfig/__init__.py.in:78
msgid "How many failed logins attempts are allowed when offline"
-msgstr ""
+msgstr "Anzahl der zulässigen fehlgeschlagenen Anmeldungen im Offline-Modus"
#: src/config/SSSDConfig/__init__.py.in:79
msgid ""
"How long (minutes) to deny login after offline_failed_login_attempts has "
"been reached"
msgstr ""
+"Zeitspanne in Minuten, nach der die Anmeldung verweigert wird, wenn "
+"offline_failed_login_attempts erreicht wurde"
#: src/config/SSSDConfig/__init__.py.in:80
msgid "What kind of messages are displayed to the user during authentication"
msgstr ""
+"Gibt die Art der Meldungen an, die dem Benutzer während der "
+"Authentifizierung angezeigt werden"
#: src/config/SSSDConfig/__init__.py.in:81
msgid "How many seconds to keep identity information cached for PAM requests"
msgstr ""
+"Anzahl der Sekunden, die zwischengespeicherte PAM-Anfragen aufbewahrt werden "
+"sollen"
#: src/config/SSSDConfig/__init__.py.in:82
msgid "How many days before password expiration a warning should be displayed"
msgstr ""
+"Gibt die Anzahl der Tage vor dem Ablauf des Passworts an, bis eine Warnung "
+"angezeigt wird"
#: src/config/SSSDConfig/__init__.py.in:85
msgid "Whether to evaluate the time-based attributes in sudo rules"
msgstr ""
+"Gibt an, ob zeitbasierte Attribute in Sudo-Regeln berechnet werden sollen"
#: src/config/SSSDConfig/__init__.py.in:91
msgid "Whether to hash host names and addresses in the known_hosts file"
msgstr ""
+"Gibt an, ob Prüfsummen von Hostnamen und Adressen in der Datei known_hosts "
+"gespeichert werden"
#: src/config/SSSDConfig/__init__.py.in:92
msgid ""
"How many seconds to keep a host in the known_hosts file after its host keys "
"were requested"
msgstr ""
+"Anzahl der Sekunden, die ein Rechner in der Datei known_host behalten werden "
+"soll, nachdem dessen Schlüssel abgefragt wurden"
#: src/config/SSSDConfig/__init__.py.in:95
msgid "List of UIDs or user names allowed to access the PAC responder"
msgstr ""
+"Liste von Benutzer-IDs oder Benutzernamen für den Zugriff auf den PAC-"
+"Responder"
#: src/config/SSSDConfig/__init__.py.in:98
msgid "Identity provider"
-msgstr "Identity Provider"
+msgstr "Identitäts-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:99
msgid "Authentication provider"
-msgstr ""
+msgstr "Authentifizierungs-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:100
msgid "Access control provider"
-msgstr ""
+msgstr "Zugriffskontroll-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:101
msgid "Password change provider"
-msgstr ""
+msgstr "Passwortänderungs-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:102
msgid "SUDO provider"
-msgstr ""
+msgstr "SUDO-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:103
msgid "Autofs provider"
-msgstr ""
+msgstr "Autofs-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:104
msgid "Session-loading provider"
-msgstr ""
+msgstr "Anbieter für das Laden der Sitzung"
#: src/config/SSSDConfig/__init__.py.in:105
msgid "Host identity provider"
-msgstr ""
+msgstr "Rechner-Identitäts-Anbieter"
#: src/config/SSSDConfig/__init__.py.in:108
msgid "Minimum user ID"
-msgstr ""
+msgstr "Minimale Benutzer‐ID"
#: src/config/SSSDConfig/__init__.py.in:109
msgid "Maximum user ID"
-msgstr ""
+msgstr "Maximale Benutzer‐ID"
#: src/config/SSSDConfig/__init__.py.in:110
msgid "Enable enumerating all users/groups"
-msgstr ""
+msgstr "Auflistung aller Benutzer/Gruppen aktivieren"
#: src/config/SSSDConfig/__init__.py.in:111
msgid "Cache credentials for offline login"
-msgstr ""
+msgstr "Zwischengespeicherte Anmeldedaten für Offline-Anmeldung"
#: src/config/SSSDConfig/__init__.py.in:112
msgid "Store password hashes"
-msgstr ""
+msgstr "Passwort-Prüfsummen speichern"
#: src/config/SSSDConfig/__init__.py.in:113
msgid "Display users/groups in fully-qualified form"
-msgstr ""
+msgstr "Benutzer/Gruppen in voll ausgeschriebener Form anzeigen"
#: src/config/SSSDConfig/__init__.py.in:114
msgid "Don't include group members in group lookups"
-msgstr ""
+msgstr "Gruppenmitglieder in Gruppen-Suchanfragen nicht einschließen"
#: src/config/SSSDConfig/__init__.py.in:115
#: src/config/SSSDConfig/__init__.py.in:122
@@ -268,36 +304,43 @@ msgstr ""
#: src/config/SSSDConfig/__init__.py.in:126
#: src/config/SSSDConfig/__init__.py.in:127
msgid "Entry cache timeout length (seconds)"
-msgstr ""
+msgstr "Zeitspanne für den Eintrags-Zwischenspeicher (Sekunden)"
#: src/config/SSSDConfig/__init__.py.in:116
msgid ""
"Restrict or prefer a specific address family when performing DNS lookups"
msgstr ""
+"Eine spezifische Adressfamilie beim Ausführen von DNS-Suchanfragen "
+"beschränken oder bevorzugen"
#: src/config/SSSDConfig/__init__.py.in:117
msgid "How long to keep cached entries after last successful login (days)"
msgstr ""
+"Gibt die Anzahl der Tage an, wie lange zwischengespeicherte Einträge nach "
+"der letzten Anmeldung aufbewahrt werden"
#: src/config/SSSDConfig/__init__.py.in:118
msgid "How long to wait for replies from DNS when resolving servers (seconds)"
msgstr ""
+"Gibt die Anzahl Sekunden an, wie lange beim Auflösen von Servernamen auf "
+"Antworten vom DNS-Dienst gewartet werden soll"
#: src/config/SSSDConfig/__init__.py.in:119
msgid "The domain part of service discovery DNS query"
-msgstr ""
+msgstr "Der Domain-Teil der DNS-Abfrage zur Dienstsuche"
#: src/config/SSSDConfig/__init__.py.in:120
msgid "Override GID value from the identity provider with this value"
msgstr ""
+"Den Gruppen-ID-Wert des Identitäts-Anbieters mit diesem Wert überschreiben"
#: src/config/SSSDConfig/__init__.py.in:121
msgid "Treat usernames as case sensitive"
-msgstr ""
+msgstr "Groß-/Kleinschreibung in Benutzernamen berücksichtigen"
#: src/config/SSSDConfig/__init__.py.in:128
msgid "How often should expired entries be refreshed in background"
-msgstr ""
+msgstr "Anzahl der Auffrischung abgelaufener Einträge im Hintergrund"
#: src/config/SSSDConfig/__init__.py.in:131
msgid "IPA domain"
@@ -309,7 +352,7 @@ msgstr "IPA-Serveradresse"
#: src/config/SSSDConfig/__init__.py.in:133
msgid "Address of backup IPA server"
-msgstr ""
+msgstr "Adresse des Ersatz-IPA-Servers"
#: src/config/SSSDConfig/__init__.py.in:134
msgid "IPA client hostname"
@@ -318,55 +361,62 @@ msgstr "IPA-Client-Rechnername"
#: src/config/SSSDConfig/__init__.py.in:135
msgid "Whether to automatically update the client's DNS entry in FreeIPA"
msgstr ""
+"Gibt an, ob der DNS-Eintrag des Clients in FreeIPA automatisch aktualisiert "
+"werden soll"
#: src/config/SSSDConfig/__init__.py.in:136
msgid "The interface whose IP should be used for dynamic DNS updates"
msgstr ""
+"Schnittstelle, deren IP für dynamische DNS-Aktualisierungen verwendet werden "
+"soll"
#: src/config/SSSDConfig/__init__.py.in:137
msgid "Search base for HBAC related objects"
-msgstr ""
+msgstr "Suchbasis für HBAC-bezogene Objekte"
#: src/config/SSSDConfig/__init__.py.in:138
msgid ""
"The amount of time between lookups of the HBAC rules against the IPA server"
-msgstr ""
+msgstr "Die Zeitspanne zwischen Suchanfragen der HBAC-Regeln an den IPA-Server"
#: src/config/SSSDConfig/__init__.py.in:139
msgid "If DENY rules are present, either DENY_ALL or IGNORE"
-msgstr ""
+msgstr "Falls DENY-Regeln vorhanden sind, entweder DENY_ALL oder IGNORE"
#: src/config/SSSDConfig/__init__.py.in:140
msgid "If set to false, host argument given by PAM will be ignored"
msgstr ""
+"Falls auf »false« gesetzt, wird das von PAM angegebene Host-Argument "
+"ignoriert"
#: src/config/SSSDConfig/__init__.py.in:141
msgid "The automounter location this IPA client is using"
-msgstr ""
+msgstr "Der Automounter-Ort, den dieser IPA-Client verwendet"
#: src/config/SSSDConfig/__init__.py.in:142
msgid "Search base for object containing info about IPA domain"
msgstr ""
+"Suchbasis für Objekte, die Informationen über eine IPA-Domain enthalten"
#: src/config/SSSDConfig/__init__.py.in:143
msgid "Search base for objects containing info about ID ranges"
-msgstr ""
+msgstr "Suchbasis für Objekte, die Informationen über ID-Bereiche enthalten"
#: src/config/SSSDConfig/__init__.py.in:146
msgid "Active Directory domain"
-msgstr ""
+msgstr "Active-Directory-Domain"
#: src/config/SSSDConfig/__init__.py.in:147
msgid "Active Directory server address"
-msgstr ""
+msgstr "Adresse des Active-Directory-Servers"
#: src/config/SSSDConfig/__init__.py.in:148
msgid "Active Directory backup server address"
-msgstr ""
+msgstr "Adresse des Ersatz-Active-Directory-Servers"
#: src/config/SSSDConfig/__init__.py.in:149
msgid "Active Directory client hostname"
-msgstr ""
+msgstr "Hostname des Active-Directory-Clients"
#: src/config/SSSDConfig/__init__.py.in:152
#: src/config/SSSDConfig/__init__.py.in:153
@@ -375,246 +425,254 @@ msgstr "Kerberos-Serveradresse"
#: src/config/SSSDConfig/__init__.py.in:154
msgid "Kerberos backup server address"
-msgstr ""
+msgstr "Adresse des Ersatz-Kerberos-Servers"
#: src/config/SSSDConfig/__init__.py.in:155
msgid "Kerberos realm"
-msgstr "Kerberos Realm"
+msgstr "Kerberos-Realm"
#: src/config/SSSDConfig/__init__.py.in:156
msgid "Authentication timeout"
-msgstr ""
+msgstr "Zeitüberschreitung bei Authentifizierung"
#: src/config/SSSDConfig/__init__.py.in:159
msgid "Directory to store credential caches"
-msgstr ""
+msgstr "Verzeichnis zum Speichern der Anmeldedaten"
#: src/config/SSSDConfig/__init__.py.in:160
msgid "Location of the user's credential cache"
-msgstr ""
+msgstr "Ort des Zwischenspeichers für die Anmeldedaten des Benutzers"
#: src/config/SSSDConfig/__init__.py.in:161
msgid "Location of the keytab to validate credentials"
-msgstr ""
+msgstr "Ort der Schlüsseltabelle zum Überprüfen von Anmeldedaten"
#: src/config/SSSDConfig/__init__.py.in:162
msgid "Enable credential validation"
-msgstr ""
+msgstr "Validierung der Anmeldedaten aktivieren"
#: src/config/SSSDConfig/__init__.py.in:163
msgid "Store password if offline for later online authentication"
-msgstr ""
+msgstr "Passwort im Offline-Modus für spätere Online-Anmeldung speichern"
#: src/config/SSSDConfig/__init__.py.in:164
msgid "Renewable lifetime of the TGT"
-msgstr ""
+msgstr "Erneuerung der Lebensdauer des TGT"
#: src/config/SSSDConfig/__init__.py.in:165
msgid "Lifetime of the TGT"
-msgstr ""
+msgstr "Lebensdauer des TGT"
#: src/config/SSSDConfig/__init__.py.in:166
msgid "Time between two checks for renewal"
-msgstr ""
+msgstr "Zeitspanne zwischen zwei Prüfungen, ob Erneuerung nötig ist"
#: src/config/SSSDConfig/__init__.py.in:167
msgid "Enables FAST"
-msgstr ""
+msgstr "Aktiviert FAST"
#: src/config/SSSDConfig/__init__.py.in:168
msgid "Selects the principal to use for FAST"
-msgstr ""
+msgstr "Wählt den für FAST zu verwendenden Principal aus"
#: src/config/SSSDConfig/__init__.py.in:169
msgid "Enables principal canonicalization"
-msgstr ""
+msgstr "Aktiviert Kanonisierung des Principals"
#: src/config/SSSDConfig/__init__.py.in:172
#: src/config/SSSDConfig/__init__.py.in:173
msgid "Server where the change password service is running if not on the KDC"
msgstr ""
+"Server, auf dem der Dienst zum Ändern des Passworts läuft, falls nicht KDC"
#: src/config/SSSDConfig/__init__.py.in:176
msgid "ldap_uri, The URI of the LDAP server"
-msgstr ""
+msgstr "ldap_uri, die URI des LDAP-Servers"
#: src/config/SSSDConfig/__init__.py.in:177
msgid "ldap_backup_uri, The URI of the LDAP server"
-msgstr ""
+msgstr "ldap_backup_uri, die URI des LDAP-Servers"
#: src/config/SSSDConfig/__init__.py.in:178
msgid "The default base DN"
-msgstr ""
+msgstr "Vorgegebene Basis-DN"
#: src/config/SSSDConfig/__init__.py.in:179
msgid "The Schema Type in use on the LDAP server, rfc2307"
-msgstr ""
+msgstr "Der vom LDAP-Server verwendete Schema-Typ gemäß RFC2307"
#: src/config/SSSDConfig/__init__.py.in:180
msgid "The default bind DN"
-msgstr ""
+msgstr "Vorgegebene Bind-DN"
#: src/config/SSSDConfig/__init__.py.in:181
msgid "The type of the authentication token of the default bind DN"
-msgstr ""
+msgstr "Typ des Authentifizierungs-Tokens der vorgegebenen Bind-DN"
#: src/config/SSSDConfig/__init__.py.in:182
msgid "The authentication token of the default bind DN"
-msgstr ""
+msgstr "Authentifizierungs-Token für die vorgegebene Bind-DN"
#: src/config/SSSDConfig/__init__.py.in:183
msgid "Length of time to attempt connection"
-msgstr ""
+msgstr "Zeitspanne für einen Verbindungsversuch"
#: src/config/SSSDConfig/__init__.py.in:184
msgid "Length of time to attempt synchronous LDAP operations"
-msgstr ""
+msgstr "Zeitspanne für Versuche zur Ausführung synchroner LDAP-Vorgänge"
#: src/config/SSSDConfig/__init__.py.in:185
msgid "Length of time between attempts to reconnect while offline"
msgstr ""
+"Zeitspanne zwischen Versuchen zum erneuten Verbindungsaufbau im Offline-Modus"
#: src/config/SSSDConfig/__init__.py.in:186
msgid "Use only the upper case for realm names"
-msgstr ""
+msgstr "Nur Großschreibung für Realm-Namen verwenden"
#: src/config/SSSDConfig/__init__.py.in:187
msgid "File that contains CA certificates"
-msgstr ""
+msgstr "Datei, die CA-Zertifikate enthält"
#: src/config/SSSDConfig/__init__.py.in:188
msgid "Path to CA certificate directory"
-msgstr ""
+msgstr "Pfad zum CA-Zertifikatverzeichnis"
#: src/config/SSSDConfig/__init__.py.in:189
msgid "File that contains the client certificate"
-msgstr ""
+msgstr "Datei, die das Client-Zertifikat enthält"
#: src/config/SSSDConfig/__init__.py.in:190
msgid "File that contains the client key"
-msgstr ""
+msgstr "Datei, die den Client-Schlüssel enthält"
#: src/config/SSSDConfig/__init__.py.in:191
msgid "List of possible ciphers suites"
-msgstr ""
+msgstr "Liste der möglichen Verschlüsselungs-Suites"
#: src/config/SSSDConfig/__init__.py.in:192
msgid "Require TLS certificate verification"
-msgstr ""
+msgstr "TLS-Zertifikatüberprüfung erforderlich machen"
#: src/config/SSSDConfig/__init__.py.in:193
msgid "Specify the sasl mechanism to use"
-msgstr ""
+msgstr "Zu verwendenden sasl-Mechanismus angeben"
#: src/config/SSSDConfig/__init__.py.in:194
msgid "Specify the sasl authorization id to use"
-msgstr ""
+msgstr "Zu verwendende ID für sasl-Authentifizierung angeben"
#: src/config/SSSDConfig/__init__.py.in:195
msgid "Specify the sasl authorization realm to use"
-msgstr ""
+msgstr "Zu verwendenden Realm für sasl-Authentifizierung angeben"
#: src/config/SSSDConfig/__init__.py.in:196
msgid "Specify the minimal SSF for LDAP sasl authorization"
-msgstr ""
+msgstr "Gibt den minimalen SSF für die SASL-Authentifizierung über LDAP an"
#: src/config/SSSDConfig/__init__.py.in:197
msgid "Kerberos service keytab"
-msgstr ""
+msgstr "Schlüsseltabelle des Kerberos-Dienstes"
#: src/config/SSSDConfig/__init__.py.in:198
msgid "Use Kerberos auth for LDAP connection"
-msgstr ""
+msgstr "Kerberos-Authentifizierung für LDAP-Verbindung verwenden"
#: src/config/SSSDConfig/__init__.py.in:199
msgid "Follow LDAP referrals"
-msgstr ""
+msgstr "LDAP-Verweisen folgen"
#: src/config/SSSDConfig/__init__.py.in:200
msgid "Lifetime of TGT for LDAP connection"
-msgstr ""
+msgstr "Lebensdauer von TGT für LDAP-Verbindung"
#: src/config/SSSDConfig/__init__.py.in:201
msgid "How to dereference aliases"
-msgstr ""
+msgstr "Dereferenzierung von Aliasen"
#: src/config/SSSDConfig/__init__.py.in:202
msgid "Service name for DNS service lookups"
-msgstr ""
+msgstr "Dienstname für DNS-Service-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:203
msgid "The number of records to retrieve in a single LDAP query"
-msgstr ""
+msgstr "Anzahl der in einer einzelnen LDAP-Abfrage zu holenden Datensätze"
#: src/config/SSSDConfig/__init__.py.in:204
msgid "The number of members that must be missing to trigger a full deref"
msgstr ""
+"Anzahl der Elemente, die fehlen müssen, um eine vollständige "
+"Dereferenzierung auszulösen"
#: src/config/SSSDConfig/__init__.py.in:205
msgid ""
"Whether the LDAP library should perform a reverse lookup to canonicalize the "
"host name during a SASL bind"
msgstr ""
+"Gibt an, ob die LDAP-Bibliothek eine Rückwärtssuche ausführen soll, um den "
+"Rechnernamen während einer SASL-Bindung zu kanonisieren"
#: src/config/SSSDConfig/__init__.py.in:207
msgid "entryUSN attribute"
-msgstr ""
+msgstr "entryUSN-Attribut"
#: src/config/SSSDConfig/__init__.py.in:208
msgid "lastUSN attribute"
-msgstr ""
+msgstr "lastUSN-Attribut"
#: src/config/SSSDConfig/__init__.py.in:210
msgid "How long to retain a connection to the LDAP server before disconnecting"
msgstr ""
+"Zeitspanne zum Halten einer Verbindung zum LDAP-Server, bis diese "
+"unterbrochen wird"
#: src/config/SSSDConfig/__init__.py.in:212
msgid "Disable the LDAP paging control"
-msgstr ""
+msgstr "LDAP-Paging-Steuerung deaktivieren"
#: src/config/SSSDConfig/__init__.py.in:213
msgid "Disable Active Directory range retrieval"
-msgstr ""
+msgstr "Bereichsermittlung für Active Directory deaktivieren"
#: src/config/SSSDConfig/__init__.py.in:216
msgid "Length of time to wait for a search request"
-msgstr ""
+msgstr "Zeitspanne zum Warten auf eine Suchanfrage"
#: src/config/SSSDConfig/__init__.py.in:217
msgid "Length of time to wait for a enumeration request"
-msgstr ""
+msgstr "Zeitspanne zum Warten auf eine Auflistungsanfrage"
#: src/config/SSSDConfig/__init__.py.in:218
msgid "Length of time between enumeration updates"
-msgstr ""
+msgstr "Zeitspanne zwischen Auflistungsanfragen"
#: src/config/SSSDConfig/__init__.py.in:219
msgid "Length of time between cache cleanups"
-msgstr ""
+msgstr "Zeitspanne zwischen den Leerungen des Zwischenspeichers"
#: src/config/SSSDConfig/__init__.py.in:220
msgid "Require TLS for ID lookups"
-msgstr ""
+msgstr "TLS für ID-Suchvorgänge erforderlich machen"
#: src/config/SSSDConfig/__init__.py.in:221
msgid "Use ID-mapping of objectSID instead of pre-set IDs"
-msgstr ""
+msgstr "ID-Zuweisung von objectSID anstelle von voreingestellten IDs verwenden"
#: src/config/SSSDConfig/__init__.py.in:222
msgid "Base DN for user lookups"
-msgstr ""
+msgstr "Basis-DN für Benutzer-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:223
msgid "Scope of user lookups"
-msgstr ""
+msgstr "Bereich für Benutzer-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:224
msgid "Filter for user lookups"
-msgstr ""
+msgstr "Filter für Benutzer-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:225
msgid "Objectclass for users"
-msgstr ""
+msgstr "Objektklasse für Benutzer"
#: src/config/SSSDConfig/__init__.py.in:226
msgid "Username attribute"
@@ -626,7 +684,7 @@ msgstr "UID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:229
msgid "Primary GID attribute"
-msgstr ""
+msgstr "Primäres GID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:230
msgid "GECOS attribute"
@@ -634,7 +692,7 @@ msgstr "GECOS-Attribut"
#: src/config/SSSDConfig/__init__.py.in:231
msgid "Home directory attribute"
-msgstr ""
+msgstr "Home-Verzeichnis-Attribut"
#: src/config/SSSDConfig/__init__.py.in:232
msgid "Shell attribute"
@@ -647,15 +705,15 @@ msgstr "UUID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:234
#: src/config/SSSDConfig/__init__.py.in:270
msgid "objectSID attribute"
-msgstr ""
+msgstr "objectSID -Attribut"
#: src/config/SSSDConfig/__init__.py.in:235
msgid "Active Directory primary group attribute for ID-mapping"
-msgstr ""
+msgstr "Active-Directory-Primärgruppen-Attribut für ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:236
msgid "User principal attribute (for Kerberos)"
-msgstr ""
+msgstr "Principal-Attribut verwenden (für Kerberos)"
#: src/config/SSSDConfig/__init__.py.in:237
msgid "Full Name"
@@ -663,493 +721,512 @@ msgstr "Vollständiger Name"
#: src/config/SSSDConfig/__init__.py.in:238
msgid "memberOf attribute"
-msgstr ""
+msgstr "memberOf-Attribut"
#: src/config/SSSDConfig/__init__.py.in:239
msgid "Modification time attribute"
-msgstr ""
+msgstr "Änderungszeit-Attribut"
#: src/config/SSSDConfig/__init__.py.in:241
msgid "shadowLastChange attribute"
-msgstr ""
+msgstr "shadowLastChange-attribut"
#: src/config/SSSDConfig/__init__.py.in:242
msgid "shadowMin attribute"
-msgstr ""
+msgstr "shadowMin-Attribut"
#: src/config/SSSDConfig/__init__.py.in:243
msgid "shadowMax attribute"
-msgstr ""
+msgstr "shadowMax Attribut"
#: src/config/SSSDConfig/__init__.py.in:244
msgid "shadowWarning attribute"
-msgstr ""
+msgstr "shadowWarning-Attribut"
#: src/config/SSSDConfig/__init__.py.in:245
msgid "shadowInactive attribute"
-msgstr ""
+msgstr "shadowInactive-Attribut"
#: src/config/SSSDConfig/__init__.py.in:246
msgid "shadowExpire attribute"
-msgstr ""
+msgstr "shadowExpire-Attribut"
#: src/config/SSSDConfig/__init__.py.in:247
msgid "shadowFlag attribute"
-msgstr ""
+msgstr "shadowFlag-Attribut"
#: src/config/SSSDConfig/__init__.py.in:248
msgid "Attribute listing authorized PAM services"
-msgstr ""
+msgstr "Attribut, welches die autorisierten PAM-Dienste auflistet"
#: src/config/SSSDConfig/__init__.py.in:249
msgid "Attribute listing authorized server hosts"
-msgstr ""
+msgstr "Attribut, welches die autorisierten Server-Hosts auflistet"
#: src/config/SSSDConfig/__init__.py.in:250
msgid "krbLastPwdChange attribute"
-msgstr ""
+msgstr "krbLastPwdChange-Attribut"
#: src/config/SSSDConfig/__init__.py.in:251
msgid "krbPasswordExpiration attribute"
-msgstr ""
+msgstr "krbPasswordExpiration-Attribut"
#: src/config/SSSDConfig/__init__.py.in:252
msgid "Attribute indicating that server side password policies are active"
msgstr ""
+"Attribut, welches angibt, dass die serverseitigen Passwortregeln aktiv sind"
#: src/config/SSSDConfig/__init__.py.in:253
msgid "accountExpires attribute of AD"
-msgstr ""
+msgstr "accountExpires-Attribut von AD"
#: src/config/SSSDConfig/__init__.py.in:254
msgid "userAccountControl attribute of AD"
-msgstr ""
+msgstr "userAccountControl-Attribut von AD"
#: src/config/SSSDConfig/__init__.py.in:255
msgid "nsAccountLock attribute"
-msgstr ""
+msgstr "nsAccountLock-Attribut"
#: src/config/SSSDConfig/__init__.py.in:256
msgid "loginDisabled attribute of NDS"
-msgstr ""
+msgstr "loginDisabled-Attribut von NDS"
#: src/config/SSSDConfig/__init__.py.in:257
msgid "loginExpirationTime attribute of NDS"
-msgstr ""
+msgstr "loginExpirationTime-Attribut von NDS"
#: src/config/SSSDConfig/__init__.py.in:258
msgid "loginAllowedTimeMap attribute of NDS"
-msgstr ""
+msgstr "loginAllowedTimeMap-Attribut von NDS"
#: src/config/SSSDConfig/__init__.py.in:259
msgid "SSH public key attribute"
-msgstr ""
+msgstr "Attribut für öffentlichen SSH-Schlüssel"
#: src/config/SSSDConfig/__init__.py.in:261
msgid "Base DN for group lookups"
-msgstr ""
+msgstr "Basis-DN für Gruppen-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:264
msgid "Objectclass for groups"
-msgstr ""
+msgstr "Objektklasse für Gruppen"
#: src/config/SSSDConfig/__init__.py.in:265
msgid "Group name"
-msgstr ""
+msgstr "Gruppenname"
#: src/config/SSSDConfig/__init__.py.in:266
msgid "Group password"
-msgstr ""
+msgstr "Gruppenpasswort"
#: src/config/SSSDConfig/__init__.py.in:267
msgid "GID attribute"
-msgstr ""
+msgstr "Gruppen-ID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:268
msgid "Group member attribute"
-msgstr ""
+msgstr "Gruppen-Mitgliedschafts-Attribut"
#: src/config/SSSDConfig/__init__.py.in:269
msgid "Group UUID attribute"
-msgstr ""
+msgstr "Gruppen-UUID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:271
msgid "Modification time attribute for groups"
-msgstr ""
+msgstr "Änderungszeit-Attribut für Gruppen"
#: src/config/SSSDConfig/__init__.py.in:273
msgid "Maximum nesting level SSSd will follow"
-msgstr ""
+msgstr "Maximale Ebene der Verschachtelung, der SSSd folgt"
#: src/config/SSSDConfig/__init__.py.in:275
msgid "Base DN for netgroup lookups"
-msgstr ""
+msgstr "Basis-DN für Netzgruppen-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:276
msgid "Objectclass for netgroups"
-msgstr ""
+msgstr "Objektklasse für Netzgruppen"
#: src/config/SSSDConfig/__init__.py.in:277
msgid "Netgroup name"
-msgstr ""
+msgstr "Netzgruppenname"
#: src/config/SSSDConfig/__init__.py.in:278
msgid "Netgroups members attribute"
-msgstr ""
+msgstr "Netzgruppen-Mitglieder-Attribut"
#: src/config/SSSDConfig/__init__.py.in:279
msgid "Netgroup triple attribute"
-msgstr ""
+msgstr "Netzgruppen-Tripel-Attribut"
#: src/config/SSSDConfig/__init__.py.in:280
msgid "Netgroup UUID attribute"
-msgstr ""
+msgstr "Netzgruppen-UUID-Attribut"
#: src/config/SSSDConfig/__init__.py.in:281
msgid "Modification time attribute for netgroups"
-msgstr ""
+msgstr "Änderungszeit-Attribut für Netzgruppen"
#: src/config/SSSDConfig/__init__.py.in:283
msgid "Base DN for service lookups"
-msgstr ""
+msgstr "Basis-DN für Dienste-Suchanfragen"
#: src/config/SSSDConfig/__init__.py.in:284
msgid "Objectclass for services"
-msgstr ""
+msgstr "Objektklasse für Dienste"
#: src/config/SSSDConfig/__init__.py.in:285
msgid "Service name attribute"
-msgstr ""
+msgstr "Name-Attribut des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:286
msgid "Service port attribute"
-msgstr ""
+msgstr "Port-Attribut des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:287
msgid "Service protocol attribute"
-msgstr ""
+msgstr "Protokoll-Attribut des Dienstes"
#: src/config/SSSDConfig/__init__.py.in:290
msgid "Lower bound for ID-mapping"
-msgstr ""
+msgstr "Untere Grenze für ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:291
msgid "Upper bound for ID-mapping"
-msgstr ""
+msgstr "Obere Grenze für ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:292
msgid "Number of IDs for each slice when ID-mapping"
-msgstr ""
+msgstr "Anzahl der IDs für jeden Teil bei der ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:293
msgid "Use autorid-compatible algorithm for ID-mapping"
-msgstr ""
+msgstr "autorid-kompatiblen Algorithmus für ID-Zuweisung verwenden"
#: src/config/SSSDConfig/__init__.py.in:294
msgid "Name of the default domain for ID-mapping"
-msgstr ""
+msgstr "Name der Vorgabe-Domain für ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:295
msgid "SID of the default domain for ID-mapping"
-msgstr ""
+msgstr "SID der Vorgabedomain für ID-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:297
msgid "Use LDAP_MATCHING_RULE_IN_CHAIN for group lookups"
-msgstr ""
+msgstr "LDAP_MATCHING_RULE_IN_CHAIN für Gruppen-Suchanfragen verwenden"
#: src/config/SSSDConfig/__init__.py.in:298
msgid "Use LDAP_MATCHING_RULE_IN_CHAIN for initgroup lookups"
-msgstr ""
+msgstr "LDAP_MATCHING_RULE_IN_CHAIN für initgroup-Suchanfragen verwenden"
#: src/config/SSSDConfig/__init__.py.in:301
msgid "Policy to evaluate the password expiration"
-msgstr ""
+msgstr "Regel zum Ermitteln der Ablaufzeit des Passworts"
#: src/config/SSSDConfig/__init__.py.in:304
msgid "LDAP filter to determine access privileges"
-msgstr ""
+msgstr "LDAP-Filter zum Bestimmen der Zugriffsprivilegien"
#: src/config/SSSDConfig/__init__.py.in:305
msgid "Which attributes shall be used to evaluate if an account is expired"
msgstr ""
+"Attribute, die bei der Ermittlung verwendet werden, ob ein Konto abgelaufen "
+"ist"
#: src/config/SSSDConfig/__init__.py.in:306
msgid "Which rules should be used to evaluate access control"
-msgstr ""
+msgstr "Regeln für die Ermittlung der Zugriffskontrolle"
#: src/config/SSSDConfig/__init__.py.in:309
msgid "URI of an LDAP server where password changes are allowed"
-msgstr ""
+msgstr "URI eines LDAP-Servers, wo Passwortänderungen zulässig sind"
#: src/config/SSSDConfig/__init__.py.in:310
msgid "URI of a backup LDAP server where password changes are allowed"
-msgstr ""
+msgstr "URI eines Ersatz-LDAP-Servers, wo Passwortänderungen zulässig sind"
#: src/config/SSSDConfig/__init__.py.in:311
msgid "DNS service name for LDAP password change server"
-msgstr ""
+msgstr "DNS-Dienstname für den LDAP-Passwortänderungsserver"
#: src/config/SSSDConfig/__init__.py.in:312
msgid ""
"Whether to update the ldap_user_shadow_last_change attribute after a "
"password change"
msgstr ""
+"Gibt an, ob das Attribut ldap_user_shadow_last_change nach einer "
+"Passwortänderung aktualisiert werden soll"
#: src/config/SSSDConfig/__init__.py.in:315
msgid "Base DN for sudo rules lookups"
-msgstr ""
+msgstr "Basis-DN für Suchanfragen nach Sudo-Regeln"
#: src/config/SSSDConfig/__init__.py.in:316
msgid "Automatic full refresh period"
-msgstr ""
+msgstr "Periode für automatische vollständige Aktualisierung"
#: src/config/SSSDConfig/__init__.py.in:317
msgid "Automatic smart refresh period"
-msgstr ""
+msgstr "Periode für bedingte vollständige Aktualisierung"
#: src/config/SSSDConfig/__init__.py.in:318
msgid "Whether to filter rules by hostname, IP addresses and network"
msgstr ""
+"Gibt an, ob Regeln nach Hostnamen, IP-Adressen oder Netzwerken gefiltert "
+"werden sollen"
#: src/config/SSSDConfig/__init__.py.in:319
msgid ""
"Hostnames and/or fully qualified domain names of this machine to filter sudo "
"rules"
msgstr ""
+"Hostnamen und/oder voll ausgeschriebene Domain-Namen dieses Rechners zum "
+"Filtern von Sudo-Regeln"
#: src/config/SSSDConfig/__init__.py.in:320
msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
msgstr ""
+"IPv4- oder IPv6-Adressen oder Netzwerk dieses Rechners zum Filtern von sudo-"
+"Regeln"
#: src/config/SSSDConfig/__init__.py.in:321
msgid "Whether to include rules that contains netgroup in host attribute"
msgstr ""
+"Gibt an, ob Regeln im Host-Attribut einbezogen werden sollen, die "
+"Netzgruppen enthalten"
#: src/config/SSSDConfig/__init__.py.in:322
msgid ""
"Whether to include rules that contains regular expression in host attribute"
msgstr ""
+"Gibt an, ob Regeln im Host-Attribut einbezogen werden sollen, die reguläre "
+"Ausdrücke enthalten"
#: src/config/SSSDConfig/__init__.py.in:323
msgid "Object class for sudo rules"
-msgstr ""
+msgstr "Objektklasse für Sudo-Regeln"
#: src/config/SSSDConfig/__init__.py.in:324
msgid "Sudo rule name"
-msgstr ""
+msgstr "Sudo-Regelname"
#: src/config/SSSDConfig/__init__.py.in:325
msgid "Sudo rule command attribute"
-msgstr ""
+msgstr "Befehlsattribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:326
msgid "Sudo rule host attribute"
-msgstr ""
+msgstr "Host-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:327
msgid "Sudo rule user attribute"
-msgstr ""
+msgstr "Benutzer-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:328
msgid "Sudo rule option attribute"
-msgstr ""
+msgstr "Optionsattribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:329
msgid "Sudo rule runasuser attribute"
-msgstr ""
+msgstr "runasuser-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:330
msgid "Sudo rule runasgroup attribute"
-msgstr ""
+msgstr "runasgroup-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:331
msgid "Sudo rule notbefore attribute"
-msgstr ""
+msgstr "notbefore-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:332
msgid "Sudo rule notafter attribute"
-msgstr ""
+msgstr "notafter-Attribut der sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:333
msgid "Sudo rule order attribute"
-msgstr ""
+msgstr "Reihenfolge-Attribut der Sudo-Regel"
#: src/config/SSSDConfig/__init__.py.in:336
msgid "Object class for automounter maps"
-msgstr ""
+msgstr "Objektklasse für Automounter-Zuweisungen"
#: src/config/SSSDConfig/__init__.py.in:337
msgid "Automounter map name attribute"
-msgstr ""
+msgstr "Name-Attribut der Automounter-Zuweisung"
#: src/config/SSSDConfig/__init__.py.in:338
msgid "Object class for automounter map entries"
-msgstr ""
+msgstr "Objektklasse für Einträge von Automounter-Zuweisungen"
#: src/config/SSSDConfig/__init__.py.in:339
msgid "Automounter map entry key attribute"
-msgstr ""
+msgstr "Schlüssel-Attribut des Automounter-Zuweisungseintrags"
#: src/config/SSSDConfig/__init__.py.in:340
msgid "Automounter map entry value attribute"
-msgstr ""
+msgstr "Wert-Attribut des Automounter-Zuweisungseintrags"
#: src/config/SSSDConfig/__init__.py.in:341
msgid "Base DN for automounter map lookups"
-msgstr ""
+msgstr "Basis-DN für Suchanfragen nach Automounter-Zuweisungen"
#: src/config/SSSDConfig/__init__.py.in:344
msgid "Comma separated list of allowed users"
-msgstr ""
+msgstr "Durch Kommata getrennte Liste der erlaubten Benutzer"
#: src/config/SSSDConfig/__init__.py.in:345
msgid "Comma separated list of prohibited users"
-msgstr ""
+msgstr "Durch Kommata getrennte Liste der verbotenen Benutzer"
#: src/config/SSSDConfig/__init__.py.in:348
msgid "Default shell, /bin/bash"
-msgstr ""
+msgstr "Vorgabeshell, /bin/bash"
#: src/config/SSSDConfig/__init__.py.in:349
msgid "Base for home directories"
-msgstr ""
+msgstr "Wurzel für Benutzerverzeichnisse"
#: src/config/SSSDConfig/__init__.py.in:352
msgid "The name of the NSS library to use"
-msgstr ""
+msgstr "Name der zu verwendenden NSS-Bibliothek"
#: src/config/SSSDConfig/__init__.py.in:353
msgid "Whether to look up canonical group name from cache if possible"
msgstr ""
+"Gibt an, ob wenn möglich im Zwischenspeicher nach dem kanonischen "
+"Gruppennamen gesucht werden soll"
#: src/config/SSSDConfig/__init__.py.in:356
msgid "PAM stack to use"
-msgstr ""
+msgstr "Zu verwendender PAM-Stapel"
#: src/monitor/monitor.c:2649
msgid "Become a daemon (default)"
-msgstr ""
+msgstr "Zum Hintergrunddienst werden (Vorgabe)"
#: src/monitor/monitor.c:2651
msgid "Run interactive (not a daemon)"
-msgstr ""
+msgstr "Interaktiv ausführen (nicht als Hintergrunddienst)"
#: src/monitor/monitor.c:2653 src/tools/sss_debuglevel.c:71
msgid "Specify a non-default config file"
-msgstr ""
+msgstr "Angabe einer nicht standardmäßigen Konfigurationsdatei"
#: src/monitor/monitor.c:2655
msgid "Print version number and exit"
-msgstr ""
+msgstr "Versionsnummer ausgeben und das Programm beenden"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
-msgstr ""
+msgstr "Fehlerdiagnosestufe"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
-msgstr ""
+msgstr "Debug-Zeitstempel hinzufügen"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
-msgstr ""
+msgstr "Zeitstempel mit Mikrosekunden anzeigen"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
-msgstr ""
+msgstr "Offener Dateideskriptor für die Debug-Protokolle"
#: src/providers/data_provider_be.c:2692
msgid "Domain of the information provider (mandatory)"
-msgstr ""
+msgstr "Domain des Informationsanbieters (obligatorisch)"
#: src/sss_client/common.c:946
msgid "Privileged socket has wrong ownership or permissions."
-msgstr ""
+msgstr "Privilegierter Socket hat falsche Eigentums- oder Zugriffsrechte."
#: src/sss_client/common.c:949
msgid "Public socket has wrong ownership or permissions."
-msgstr ""
+msgstr "Öffentlicher Socket hat falsche Eigentums- oder Zugriffsrechte."
#: src/sss_client/common.c:952
msgid "Unexpected format of the server credential message."
-msgstr ""
+msgstr "Unerwartetes Format der Server-Anmeldenachricht."
#: src/sss_client/common.c:955
msgid "SSSD is not run by root."
-msgstr ""
+msgstr "SSSD wird nicht durch Root ausgeführt."
#: src/sss_client/common.c:960
msgid "An error occurred, but no description can be found."
msgstr ""
+"Ein Fehler ist aufgetreten, aber es kann keine Beschreibung gefunden werden."
#: src/sss_client/common.c:966
msgid "Unexpected error while looking for an error description"
-msgstr ""
+msgstr "Unerwarteter Fehler beim Suchen nach einer Fehlerbeschreibung"
#: src/sss_client/pam_sss.c:387
msgid "Passwords do not match"
-msgstr ""
+msgstr "Passwörter stimmen nicht überein"
#: src/sss_client/pam_sss.c:575
msgid "Password reset by root is not supported."
-msgstr ""
+msgstr "Das Zurücksetzen des Passworts durch Root wird nicht unterstützt."
#: src/sss_client/pam_sss.c:616
msgid "Authenticated with cached credentials"
-msgstr ""
+msgstr "Authentifiziert mit zwischengespeicherten Anmeldedaten"
#: src/sss_client/pam_sss.c:617
msgid ", your cached password will expire at: "
-msgstr ""
+msgstr ", Ihr zwischengespeichertes Passwort läuft ab am: "
#: src/sss_client/pam_sss.c:647
#, c-format
msgid "Your password has expired. You have %1$d grace login(s) remaining."
msgstr ""
+"Ihr Passwort ist abgelaufen. Ihnen verbleiben nur noch %1$d Anmeldungen."
#: src/sss_client/pam_sss.c:693
#, c-format
msgid "Your password will expire in %1$d %2$s."
-msgstr ""
+msgstr "Ihr Passwort wird in %1$d %2$s ablaufen."
#: src/sss_client/pam_sss.c:742
msgid "Authentication is denied until: "
-msgstr ""
+msgstr "Authentifizierung wird verweigert bis: "
#: src/sss_client/pam_sss.c:763
msgid "System is offline, password change not possible"
-msgstr ""
+msgstr "System ist offline, Änderung des Passworts ist nicht möglich"
#: src/sss_client/pam_sss.c:793 src/sss_client/pam_sss.c:806
msgid "Password change failed. "
-msgstr ""
+msgstr "Änderung des Passworts fehlgeschlagen. "
#: src/sss_client/pam_sss.c:796 src/sss_client/pam_sss.c:807
msgid "Server message: "
-msgstr ""
+msgstr "Server-Meldung: "
#: src/sss_client/pam_sss.c:1231
msgid "New Password: "
-msgstr ""
+msgstr "Neues Passwort: "
#: src/sss_client/pam_sss.c:1232
msgid "Reenter new Password: "
-msgstr ""
+msgstr "Neues Passwort wiederholen: "
#: src/sss_client/pam_sss.c:1318
msgid "Password: "
-msgstr ""
+msgstr "Passwort: "
#: src/sss_client/pam_sss.c:1350
msgid "Current Password: "
-msgstr ""
+msgstr "Aktuelles Passwort: "
#: src/sss_client/pam_sss.c:1497
msgid "Password expired. Change your password now."
-msgstr ""
+msgstr "Passwort ist abgelaufen. Ändern Sie Ihr Passwort jetzt."
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:40
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:192 src/tools/sss_useradd.c:48
@@ -1158,12 +1235,12 @@ msgstr ""
#: src/tools/sss_userdel.c:132 src/tools/sss_usermod.c:47
#: src/tools/sss_cache.c:469 src/tools/sss_debuglevel.c:69
msgid "The debug level to run with"
-msgstr ""
+msgstr "Stufe, mit der die Fehlerdiagnose ausgeführt werden soll"
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:42
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:196
msgid "The SSSD domain to use"
-msgstr ""
+msgstr "Die zu verwendende SSSD-Domain"
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:58 src/tools/sss_useradd.c:73
#: src/tools/sss_groupadd.c:58 src/tools/sss_groupdel.c:53
@@ -1171,48 +1248,48 @@ msgstr ""
#: src/tools/sss_userdel.c:149 src/tools/sss_usermod.c:74
#: src/tools/sss_cache.c:500
msgid "Error setting the locale\n"
-msgstr ""
+msgstr "Fehler beim Setzen der Locale-Einstellung\n"
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:65
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:91
msgid "Not enough memory\n"
-msgstr ""
+msgstr "Nicht genügend Speicher\n"
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:84
msgid "User not specified\n"
-msgstr ""
+msgstr "Benutzer nicht angegeben\n"
#: src/sss_client/ssh/sss_ssh_authorizedkeys.c:105
msgid "Error looking up public keys\n"
-msgstr ""
+msgstr "Fehler beim Nachschlagen der öffentlichen Schlüssel\n"
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:194
msgid "The port to use to connect to the host"
-msgstr ""
+msgstr "Der Port, der für die Verbindung zum Host benutzt werden soll"
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:238
msgid "Invalid port\n"
-msgstr ""
+msgstr "Ungültiger Port\n"
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:243
msgid "Host not specified\n"
-msgstr ""
+msgstr "Rechner nicht angegeben\n"
#: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:249
msgid "The path to the proxy command must be absolute\n"
-msgstr ""
+msgstr "Der Pfad zum Proxy-Befehl muss absolut sein\n"
#: src/tools/sss_useradd.c:49 src/tools/sss_usermod.c:48
msgid "The UID of the user"
-msgstr ""
+msgstr "Benutzer-ID des Benutzers"
#: src/tools/sss_useradd.c:50 src/tools/sss_usermod.c:50
msgid "The comment string"
-msgstr ""
+msgstr "Die Kommentarzeichenkette"
#: src/tools/sss_useradd.c:51 src/tools/sss_usermod.c:51
msgid "Home directory"
-msgstr "Bneutzerverzeichnis"
+msgstr "Benutzerverzeichnis"
#: src/tools/sss_useradd.c:52 src/tools/sss_usermod.c:52
msgid "Login shell"
@@ -1224,140 +1301,146 @@ msgstr "Gruppen"
#: src/tools/sss_useradd.c:54
msgid "Create user's directory if it does not exist"
-msgstr ""
+msgstr "Benutzerverzeichnis erstellen, falls es nicht existiert"
#: src/tools/sss_useradd.c:55
msgid "Never create user's directory, overrides config"
msgstr ""
+"Home-Verzeichnis des Benutzers niemals anlegen; setzt die Konfiguration "
+"außer Kraft"
#: src/tools/sss_useradd.c:56
msgid "Specify an alternative skeleton directory"
-msgstr ""
+msgstr "Ein alternatives Skel-Verzeichnis angeben"
#: src/tools/sss_useradd.c:57 src/tools/sss_usermod.c:57
msgid "The SELinux user for user's login"
-msgstr ""
+msgstr "Der SELinux-Benutzer für die Benutzeranmeldung"
#: src/tools/sss_useradd.c:86 src/tools/sss_groupmod.c:78
#: src/tools/sss_usermod.c:87
msgid "Specify group to add to\n"
-msgstr ""
+msgstr "Hinzuzufügende Gruppe angeben\n"
#: src/tools/sss_useradd.c:110
msgid "Specify user to add\n"
-msgstr ""
+msgstr "Hinzuzufügenden Benutzer angeben\n"
#: src/tools/sss_useradd.c:119 src/tools/sss_groupadd.c:84
#: src/tools/sss_groupdel.c:78 src/tools/sss_groupmod.c:111
#: src/tools/sss_groupshow.c:695 src/tools/sss_userdel.c:194
#: src/tools/sss_usermod.c:128
msgid "Error initializing the tools - no local domain\n"
-msgstr ""
+msgstr "Fehler beim Initialisieren der Werkzeuge – keine lokale Domain\n"
#: src/tools/sss_useradd.c:121 src/tools/sss_groupadd.c:86
#: src/tools/sss_groupdel.c:80 src/tools/sss_groupmod.c:113
#: src/tools/sss_groupshow.c:697 src/tools/sss_userdel.c:196
#: src/tools/sss_usermod.c:130
msgid "Error initializing the tools\n"
-msgstr ""
+msgstr "Fehler beim Initialisieren der Werkzeuge\n"
#: src/tools/sss_useradd.c:130 src/tools/sss_groupadd.c:95
#: src/tools/sss_groupdel.c:89 src/tools/sss_groupmod.c:121
#: src/tools/sss_groupshow.c:706 src/tools/sss_userdel.c:205
#: src/tools/sss_usermod.c:139
msgid "Invalid domain specified in FQDN\n"
-msgstr ""
+msgstr "Ungültige Domain in FQDN angegeben\n"
#: src/tools/sss_useradd.c:139 src/tools/sss_groupmod.c:141
#: src/tools/sss_groupmod.c:168 src/tools/sss_usermod.c:162
#: src/tools/sss_usermod.c:189
msgid "Internal error while parsing parameters\n"
-msgstr ""
+msgstr "Interner Fehler beim Einlesen der Parameter\n"
#: src/tools/sss_useradd.c:147 src/tools/sss_usermod.c:170
#: src/tools/sss_usermod.c:197
msgid "Groups must be in the same domain as user\n"
-msgstr ""
+msgstr "Gruppen müssen in der gleichen Domain wie Benutzer sein\n"
#: src/tools/sss_useradd.c:155
#, c-format
msgid "Cannot find group %1$s in local domain\n"
-msgstr ""
+msgstr "Gruppe %1$s kann in lokaler Domain nicht gefunden werden\n"
#: src/tools/sss_useradd.c:170 src/tools/sss_userdel.c:215
msgid "Cannot set default values\n"
-msgstr ""
+msgstr "Vorgabewerte können nicht gesetzt werden\n"
#: src/tools/sss_useradd.c:177 src/tools/sss_usermod.c:153
msgid "The selected UID is outside the allowed range\n"
-msgstr ""
+msgstr "Die gewählte Benutzer-ID liegt außerhalb des zulässigen Bereichs\n"
#: src/tools/sss_useradd.c:206 src/tools/sss_usermod.c:264
msgid "Cannot set SELinux login context\n"
-msgstr ""
+msgstr "SELinux-Anmeldekontext kann nicht erhalten werden\n"
#: src/tools/sss_useradd.c:221
msgid "Cannot get info about the user\n"
-msgstr ""
+msgstr "Info zum Benutzer nicht gefunden\n"
#: src/tools/sss_useradd.c:233
msgid "User's home directory already exists, not copying data from skeldir\n"
msgstr ""
+"Home-Verzeichnis des Benutzers existiert bereits, es werden keine Daten aus "
+"dem Skel-Verzeichnis kopiert.\n"
#: src/tools/sss_useradd.c:236
#, c-format
msgid "Cannot create user's home directory: %1$s\n"
-msgstr ""
+msgstr "Home-Verzeichnis für den Benutzer kann nicht erstellt werden: %1$s\n"
#: src/tools/sss_useradd.c:247
#, c-format
msgid "Cannot create user's mail spool: %1$s\n"
-msgstr ""
+msgstr "Mail-Spool für den Benutzer kann nicht angelegt werden: %1$s\n"
#: src/tools/sss_useradd.c:266
msgid "Could not allocate ID for the user - domain full?\n"
-msgstr ""
+msgstr "ID für den Benutzer konnte nicht zugewiesen werden – Domain voll?\n"
#: src/tools/sss_useradd.c:270
msgid "A user or group with the same name or ID already exists\n"
msgstr ""
+"Ein Benutzer oder eine Gruppe mit gleichem Namen oder ID existiert bereits\n"
#: src/tools/sss_useradd.c:276
msgid "Transaction error. Could not add user.\n"
-msgstr ""
+msgstr "Transaktionsfehler. Benutzer kann nicht hinzugefügt werden.\n"
#: src/tools/sss_groupadd.c:43 src/tools/sss_groupmod.c:48
msgid "The GID of the group"
-msgstr ""
+msgstr "Die Gruppen-ID der Gruppe"
#: src/tools/sss_groupadd.c:75
msgid "Specify group to add\n"
-msgstr ""
+msgstr "Hinzuzufügende Gruppe angeben\n"
#: src/tools/sss_groupadd.c:104 src/tools/sss_groupmod.c:192
msgid "The selected GID is outside the allowed range\n"
-msgstr ""
+msgstr "Die gewählte Gruppen-ID liegt außerhalb des zulässigen Bereichs\n"
#: src/tools/sss_groupadd.c:141
msgid "Could not allocate ID for the group - domain full?\n"
-msgstr ""
+msgstr "ID für die Gruppe konnte nicht zugewiesen werden – Domain voll?\n"
#: src/tools/sss_groupadd.c:145
msgid "A group with the same name or GID already exists\n"
-msgstr ""
+msgstr "Eine Gruppe mit gleichem Namen oder Gruppen-ID existiert bereits\n"
#: src/tools/sss_groupadd.c:150
msgid "Transaction error. Could not add group.\n"
-msgstr ""
+msgstr "Transaktionsfehler. Gruppe kann nicht hinzugefügt werden.\n"
#: src/tools/sss_groupdel.c:69
msgid "Specify group to delete\n"
-msgstr ""
+msgstr "Zu löschende Gruppe angeben\n"
#: src/tools/sss_groupdel.c:102
#, c-format
msgid "Group %1$s is outside the defined ID range for domain\n"
msgstr ""
+"Gruppe %1$s ist außerhalb des für diese Domain festgelegten ID-Bereichs\n"
#: src/tools/sss_groupdel.c:117 src/tools/sss_groupmod.c:219
#: src/tools/sss_groupmod.c:226 src/tools/sss_groupmod.c:233
@@ -1366,42 +1449,49 @@ msgstr ""
#, c-format
msgid "NSS request failed (%1$d). Entry might remain in memory cache.\n"
msgstr ""
+"NSS-Anfrage fehlgeschlagen (%1$d). Der Eintrag könnte im Zwischenspeicher "
+"verbleiben.\n"
#: src/tools/sss_groupdel.c:129
msgid ""
"No such group in local domain. Removing groups only allowed in local "
"domain.\n"
msgstr ""
+"Keine solche Gruppe in lokaler Domain. Entfernen von Gruppen ist nur in der "
+"lokalen Domain zulässig.\n"
#: src/tools/sss_groupdel.c:134
msgid "Internal error. Could not remove group.\n"
-msgstr ""
+msgstr "Interner Fehler. Gruppe konnte nicht entfernt werden.\n"
#: src/tools/sss_groupmod.c:44
msgid "Groups to add this group to"
-msgstr ""
+msgstr "Gruppen, zu denen diese Gruppe hinzugefügt werden soll"
#: src/tools/sss_groupmod.c:46
msgid "Groups to remove this group from"
-msgstr ""
+msgstr "Gruppen, aus denen diese Gruppe entfernt werden soll"
#: src/tools/sss_groupmod.c:86 src/tools/sss_usermod.c:95
msgid "Specify group to remove from\n"
-msgstr ""
+msgstr "Gruppe angeben, aus der entfernt werden soll\n"
#: src/tools/sss_groupmod.c:100
msgid "Specify group to modify\n"
-msgstr ""
+msgstr "Zu ändernde Gruppe angeben\n"
#: src/tools/sss_groupmod.c:128
msgid ""
"Cannot find group in local domain, modifying groups is allowed only in local "
"domain\n"
msgstr ""
+"Gruppe kann in lokaler Domain nicht gefunden werden, das Ändern von Gruppen "
+"ist nur in der lokalen Domain zulässig\n"
#: src/tools/sss_groupmod.c:149 src/tools/sss_groupmod.c:176
msgid "Member groups must be in the same domain as parent group\n"
msgstr ""
+"Untergruppen müssen in der selben Domain sein wie die übergeordnete Gruppe\n"
#: src/tools/sss_groupmod.c:157 src/tools/sss_groupmod.c:184
#: src/tools/sss_usermod.c:178 src/tools/sss_usermod.c:205
@@ -1410,37 +1500,43 @@ msgid ""
"Cannot find group %1$s in local domain, only groups in local domain are "
"allowed\n"
msgstr ""
+"Gruppe %1$s kann in lokaler Domain nicht gefunden werden, nur Gruppen in "
+"lokaler Domain sind zulässig\n"
#: src/tools/sss_groupmod.c:250
msgid "Could not modify group - check if member group names are correct\n"
msgstr ""
+"Gruppe konnte nicht geändert werden – bitte prüfen, ob die Gruppennamen "
+"korrekt sind.\n"
#: src/tools/sss_groupmod.c:254
msgid "Could not modify group - check if groupname is correct\n"
msgstr ""
+"Gruppe kann nicht geändert werden – prüfen Sie, ob der Gruppenname korrekt "
+"ist\n"
#: src/tools/sss_groupmod.c:258
msgid "Transaction error. Could not modify group.\n"
-msgstr ""
+msgstr "Transaktionsfehler. Gruppe kann nicht geändert werden.\n"
#: src/tools/sss_groupshow.c:598
#, c-format
msgid "%1$s%2$sGroup: %3$s\n"
-msgstr ""
+msgstr "%1$s%2$sGruppe: %3$s\n"
#: src/tools/sss_groupshow.c:599
msgid "Magic Private "
-msgstr ""
+msgstr "Magic Private "
#: src/tools/sss_groupshow.c:601
#, c-format
msgid "%1$sGID number: %2$d\n"
-msgstr ""
+msgstr "%1$sGruppen-ID-Nummer: %2$d\n"
#: src/tools/sss_groupshow.c:603
#, c-format
msgid "%1$sMember users: "
-msgstr ""
+msgstr "%1$sMitglied Benutzer: "
#: src/tools/sss_groupshow.c:610
#, c-format
@@ -1448,6 +1544,8 @@ msgid ""
"\n"
"%1$sIs a member of: "
msgstr ""
+"\n"
+"%1$sIst Mitglied von: "
#: src/tools/sss_groupshow.c:617
#, c-format
@@ -1455,101 +1553,110 @@ msgid ""
"\n"
"%1$sMember groups: "
msgstr ""
+"\n"
+"%1$sMitglied Gruppen: "
#: src/tools/sss_groupshow.c:653
msgid "Print indirect group members recursively"
-msgstr ""
+msgstr "Indirekte Gruppenmitglieder rekursiv ausgeben"
#: src/tools/sss_groupshow.c:686
msgid "Specify group to show\n"
-msgstr ""
+msgstr "Anzuzeigende Gruppe angeben\n"
#: src/tools/sss_groupshow.c:725
msgid ""
"No such group in local domain. Printing groups only allowed in local "
"domain.\n"
msgstr ""
+"Keine solche Gruppe in lokaler Domain. Die Ausgabe von Gruppen ist nur in "
+"der lokalen Domain zulässig.\n"
#: src/tools/sss_groupshow.c:730
msgid "Internal error. Could not print group.\n"
-msgstr ""
+msgstr "Interner Fehler. Gruppen können nicht ausgegeben werden.\n"
#: src/tools/sss_userdel.c:134
msgid "Remove home directory and mail spool"
-msgstr ""
+msgstr "Home-Verzeichnis und Mail-Spool entfernen"
#: src/tools/sss_userdel.c:136
msgid "Do not remove home directory and mail spool"
-msgstr ""
+msgstr "Home-Verzeichnis und Mail-Spool nicht entfernen"
#: src/tools/sss_userdel.c:138
msgid "Force removal of files not owned by the user"
-msgstr ""
+msgstr "Das Löschen von Dateien erzwingen, die dem Benutzer nicht gehören"
#: src/tools/sss_userdel.c:140
msgid "Kill users' processes before removing him"
-msgstr ""
+msgstr "Prozesse des Benutzers abwürgen, bevor dieser gelöscht wird"
#: src/tools/sss_userdel.c:185
msgid "Specify user to delete\n"
-msgstr ""
+msgstr "Zu löschenden Benutzer angeben\n"
#: src/tools/sss_userdel.c:231
#, c-format
msgid "User %1$s is outside the defined ID range for domain\n"
msgstr ""
+"Benutzer %1$s ist außerhalb des für diese Domain festgelegten ID-Bereichs\n"
#: src/tools/sss_userdel.c:256
msgid "Cannot reset SELinux login context\n"
-msgstr ""
+msgstr "SELinux-Anmeldekontext kann nicht zurückgesetzt werden\n"
#: src/tools/sss_userdel.c:268
#, c-format
msgid "WARNING: The user (uid %1$lu) was still logged in when deleted.\n"
-msgstr ""
+msgstr "WARNUNG: Der Benutzer (uid %1$lu) war beim Löschen noch angemeldet.\n"
#: src/tools/sss_userdel.c:273
msgid "Cannot determine if the user was logged in on this platform"
msgstr ""
+"Es kann nicht ermittelt werden, ob der Benutzer auf dieser Plattform "
+"angemeldet war."
#: src/tools/sss_userdel.c:278
msgid "Error while checking if the user was logged in\n"
-msgstr ""
+msgstr "Fehler bei der Überprüfung, ob der Benutzer angemeldet war\n"
#: src/tools/sss_userdel.c:285
#, c-format
msgid "The post-delete command failed: %1$s\n"
-msgstr ""
+msgstr "Der nach dem Löschen auszuführende Befehl ist fehlgeschlagen: %1$s\n"
#: src/tools/sss_userdel.c:305
msgid "Not removing home dir - not owned by user\n"
-msgstr ""
+msgstr "Home-Verzeichnis wird nicht entfernt – es gehört nicht dem Benutzer\n"
#: src/tools/sss_userdel.c:307
#, c-format
msgid "Cannot remove homedir: %1$s\n"
-msgstr ""
+msgstr "Home-Verzeichnis kann nicht entfernt werden: %1$s\n"
#: src/tools/sss_userdel.c:320
msgid ""
"No such user in local domain. Removing users only allowed in local domain.\n"
msgstr ""
+"Kein solcher Benutzer in lokaler Domain. Entfernen von Benutzern ist nur in "
+"der lokalen Domain zulässig.\n"
#: src/tools/sss_userdel.c:325
msgid "Internal error. Could not remove user.\n"
-msgstr ""
+msgstr "Interner Fehler. Benutzer konnte nicht entfernt werden.\n"
#: src/tools/sss_usermod.c:49
msgid "The GID of the user"
-msgstr ""
+msgstr "Gruppen-ID des Benutzers"
#: src/tools/sss_usermod.c:53
msgid "Groups to add this user to"
-msgstr ""
+msgstr "Gruppen, zu denen dieser Benutzer hinzugefügt werden soll"
#: src/tools/sss_usermod.c:54
msgid "Groups to remove this user from"
-msgstr ""
+msgstr "Gruppen, aus denen der Benutzer entfernt werden soll"
#: src/tools/sss_usermod.c:55
msgid "Lock the account"
@@ -1561,29 +1668,36 @@ msgstr "Das Konto entsperren"
#: src/tools/sss_usermod.c:119
msgid "Specify user to modify\n"
-msgstr ""
+msgstr "Zu ändernden Benutzer angeben\n"
#: src/tools/sss_usermod.c:146
msgid ""
"Cannot find user in local domain, modifying users is allowed only in local "
"domain\n"
msgstr ""
+"Benutzer kann in lokaler Domain nicht gefunden werden, das Ändern von "
+"Benutzern ist nur in der lokalen Domain zulässig\n"
#: src/tools/sss_usermod.c:281
msgid "Could not modify user - check if group names are correct\n"
msgstr ""
+"Benutzer kann nicht geändert werden – bitte prüfen, ob die Gruppennamen "
+"korrekt sind\n"
#: src/tools/sss_usermod.c:285
msgid "Could not modify user - user already member of groups?\n"
msgstr ""
+"Benutzer kann nicht geändert werden – ist der Benutzer bereits Mitglied "
+"einer Gruppe?\n"
#: src/tools/sss_usermod.c:289
msgid "Transaction error. Could not modify user.\n"
-msgstr ""
+msgstr "Transaktionsfehler. Benutzer kann nicht geändert werden.\n"
#: src/tools/sss_cache.c:160
msgid "No cache object matched the specified search\n"
msgstr ""
+"Kein Objekt im Zwischenspeicher entspricht der angegebenen Suchanfrage\n"
#: src/tools/sss_cache.c:318
#, c-format
@@ -1598,87 +1712,212 @@ msgstr ""
#: src/tools/sss_cache.c:333
#, c-format
msgid "Couldn't invalidate %1$s"
-msgstr ""
+msgstr "%1$s konnte nicht annulliert werdem"
#: src/tools/sss_cache.c:340
#, c-format
msgid "Couldn't invalidate %1$s %2$s"
-msgstr ""
+msgstr "%1$s %2$s konnte nicht annulliert werden"
#: src/tools/sss_cache.c:471
msgid "Invalidate particular user"
-msgstr ""
+msgstr "Bestimmten Benutzer annullieren"
#: src/tools/sss_cache.c:473
msgid "Invalidate all users"
-msgstr ""
+msgstr "Alle Benutzer annullieren"
#: src/tools/sss_cache.c:475
msgid "Invalidate particular group"
-msgstr ""
+msgstr "Bestimmte Gruppe annullieren"
#: src/tools/sss_cache.c:477
msgid "Invalidate all groups"
-msgstr ""
+msgstr "Alle Gruppen annullieren"
#: src/tools/sss_cache.c:479
msgid "Invalidate particular netgroup"
-msgstr ""
+msgstr "Bestimmte Netzgruppe annullieren"
#: src/tools/sss_cache.c:481
msgid "Invalidate all netgroups"
-msgstr ""
+msgstr "Alle Netzgruppen annullieren"
#: src/tools/sss_cache.c:483
msgid "Invalidate particular service"
-msgstr ""
+msgstr "Bestimmten Dienst annullieren"
#: src/tools/sss_cache.c:485
msgid "Invalidate all services"
-msgstr ""
+msgstr "Alle Dienste annullieren"
#: src/tools/sss_cache.c:488
msgid "Invalidate particular autofs map"
-msgstr ""
+msgstr "Bestimmte autofs-Zuweisung annullieren"
#: src/tools/sss_cache.c:490
msgid "Invalidate all autofs maps"
-msgstr ""
+msgstr "Alle autofs-Zuweisungen annullieren"
#: src/tools/sss_cache.c:493
msgid "Only invalidate entries from a particular domain"
-msgstr ""
+msgstr "Nur Einträge einer bestimmten Domain annullieren"
#: src/tools/sss_cache.c:532
msgid "Please select at least one object to invalidate\n"
-msgstr ""
+msgstr "Bitte wählen Sie mindestens ein Objekt für die Annullierung\n"
#: src/tools/sss_cache.c:604
-#, c-format
+#, fuzzy, c-format
msgid "Could not open domain %1$s\n"
-msgstr ""
+msgstr "Verfügbare Domains konnten nicht geöffnet werden\n"
#: src/tools/sss_cache.c:606
msgid "Could not open available domains\n"
-msgstr ""
+msgstr "Verfügbare Domains konnten nicht geöffnet werden\n"
#: src/tools/sss_debuglevel.c:40
msgid "\n"
-msgstr ""
+msgstr "\n"
#: src/tools/sss_debuglevel.c:96
msgid "Specify debug level you want to set\n"
-msgstr ""
+msgstr "Zu setzende Debug-Stufe angeben\n"
#: src/tools/tools_util.c:281
msgid "Out of memory\n"
-msgstr ""
+msgstr "Nicht genügend Speicher\n"
#: src/tools/tools_util.h:43
#, c-format
msgid "%1$s must be run as root\n"
-msgstr ""
+msgstr "%1$s muss als Root ausgeführt werden\n"
#: src/util/util.h:97
msgid "Send the debug output to files instead of stderr"
msgstr ""
+"Debug-Ausgabe in Dateien speichern, anstatt in die Standard-Fehlerausgabe "
+"(stderr) zu senden"
+
+#~ msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+#~ msgstr ""
+#~ "Liste von Benutzer-IDs oder Benutzernamen für den Zugriff auf den "
+#~ "InfoPipe-Responder"
+
+#~ msgid "List of user attributes the InfoPipe is allowed to publish"
+#~ msgstr "Liste der Benutzerattribute, die InfoPipe veröffentlichen darf"
+
+#~ msgid "Whether to automatically update the client's DNS entry"
+#~ msgstr "Automatische Aktualisierung des DNS-Eintrags des Clients"
+
+#~ msgid "The TTL to apply to the client's DNS entry after updating it"
+#~ msgstr ""
+#~ "Die auf den DNS-Eintrag des Clients anzuwendende TTL, nachdem dieser "
+#~ "aktualisiert wurde"
+
+#~ msgid "How often to periodically update the client's DNS entry"
+#~ msgstr ""
+#~ "Gibt an, wie oft der DNS-Eintrag des Clients aktualisiert werden soll"
+
+#~ msgid "Whether the provider should explicitly update the PTR record as well"
+#~ msgstr ""
+#~ "Gibt an, ob der Anbieter den PTR-Datensatz ebenfalls explizit "
+#~ "aktualisieren soll"
+
+#~ msgid "Whether the nsupdate utility should default to using TCP"
+#~ msgstr ""
+#~ "Gibt an, ob das nsupdate-Dienstprogramm per Vorgabe TCP verwenden soll"
+
+#~ msgid "What kind of authentication should be used to perform the DNS update"
+#~ msgstr ""
+#~ "Gibt an, welche Art der Authentifizierung bei der DNS-Aktualisierung "
+#~ "verwendet werden soll"
+
+#~ msgid "Control enumeration of trusted domains"
+#~ msgstr "Aufzählung vertrauenswürdiger Domains steuern"
+
+#~ msgid "How often should subdomains list be refreshed"
+#~ msgstr "Anzahl der Auffrischung der Subdomain-Liste"
+
+#~ msgid ""
+#~ "The amount of time in seconds between lookups of the SELinux maps against "
+#~ "the IPA server"
+#~ msgstr ""
+#~ "Die Zeitspanne in Sekunden zwischen Suchanfragen der SELinux-Zuweisung an "
+#~ "den IPA-Server"
+
+#~ msgid "Enable DNS sites - location based service discovery"
+#~ msgstr "DNS-Sites aktivieren – standortbasierte Dienstsuche"
+
+#~ msgid "Whether to use the Global Catalog for lookups"
+#~ msgstr "Verwendung des globalen Katalogs für Suchvorgänge"
+
+#~ msgid "Operation mode for GPO-based access control"
+#~ msgstr "Operationsmodus für GPO-basierte Zuhgriffskontrolle"
+
+#~ msgid "Whether to create kdcinfo files"
+#~ msgstr "Gibt an, ob kdcinfo-Dateien angelegt werden"
+
+#~ msgid "Enables enterprise principals"
+#~ msgstr "Enterprise-Principals aktivieren"
+
+#~ msgid "A list of extra attributes to download along with the user entry"
+#~ msgstr ""
+#~ "Eine Liste der zusätzlich herunterzuladender Attribute zusammen mit dem "
+#~ "Benutzereintrag"
+
+#~ msgid "Type of the group and other flags"
+#~ msgstr "Typ der Gruppe und weitere Flags"
+
+#~ msgid "Whether to use Token-Groups"
+#~ msgstr "Verwendung von Token-Gruppen"
+
+#~ msgid "Set lower boundary for allowed IDs from the LDAP server"
+#~ msgstr "Untere Grenze für zulässige IDs des LDAP-Servers angeben"
+
+#~ msgid "Set upper boundary for allowed IDs from the LDAP server"
+#~ msgstr "Obere Grenze für zulässige IDs des LDAP-Servers angeben"
+
+#~ msgid ""
+#~ "After changing the OTP password, you need to log out and back in order to "
+#~ "acquire a ticket"
+#~ msgstr ""
+#~ "Nach dem Ändern des OTP-Passworts müssen Sie sich ab- und wieder "
+#~ "anmelden, um ein Ticket erhalten zu können"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Ein Attribut/Wert-Paar hinzufügen. Das Format ist Attributname=Wert."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Ein Attribut/Wert-Paar löschen. Das Format ist Attributname=Wert."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist "
+#~ "Attributname=Wert. Bei Attributen mit mehreren Werten ersetzt der Befehl "
+#~ "die bereits vorhandenen Werte."
+
+#~ msgid "Specify the attribute name/value pair(s)\n"
+#~ msgstr "Name/Wert-Paar(e) für das oder die Attribute angeben\n"
+
+#~ msgid "Invalidate all cached entries except for sudo rules"
+#~ msgstr ""
+#~ "Alle zwischengespeicherten Einträge mit Ausnahme von Sudo-Regeln "
+#~ "annullieren"
+
+#~ msgid ""
+#~ "Could not open domain %1$s. If the domain is a subdomain (trusted "
+#~ "domain), use fully qualified name instead of --domain/-d parameter.\n"
+#~ msgstr ""
+#~ "Domain %1$s kann nicht geöffnet werden. Falls es sich um eine Subdomain "
+#~ "(trusted domain) handelt, verwenden Sie den voll ausgeschriebenen Namen "
+#~ "anstelle des Parameters --domain/-d.\n"
+
+#~ msgid "Only one argument expected\n"
+#~ msgstr "Nur ein Argument wurde erwartet\n"
+
+#~ msgid "Name '%1$s' does not seem to be FQDN ('%2$s = TRUE' is set)\n"
+#~ msgstr "Name »%1$s« scheint kein FQDN zu sein (»%2$s = TRUE« ist gesetzt)\n"
diff --git a/po/es.po b/po/es.po
index 899ebdee8..acba3b73a 100644
--- a/po/es.po
+++ b/po/es.po
@@ -3,20 +3,23 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# Adolfo Jayme Barrientos <fitoschido@ubuntu.com>, 2012
+# Adolfo Jayme Barrientos <fito@libreoffice.org>, 2012
+# Adolfo Jayme Barrientos <fito@libreoffice.org>, 2012
# Daniel Cabrera <logan@fedoraproject.org>, 2011
# vareli <ehespinosa@ya.com>, 2013
# Daniel Cabrera <logan@fedoraproject.org>, 2011
# Hugo Jiménez Hernández <hjimenezhdez@gmail.com>, 2011
# sgallagh <sgallagh@redhat.com>, 2011
+# sgallagh <sgallagh@redhat.com>, 2011
+# vareli <ehespinosa@ya.com>, 2013
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Spanish (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Spanish (http://www.transifex.com/projects/p/sssd/language/"
"es/)\n"
"Language: es\n"
"MIME-Version: 1.0\n"
@@ -1092,22 +1095,22 @@ msgstr "Indicar un archivo de configuración diferente al predeterminado"
msgid "Print version number and exit"
msgstr "Muestra el número de versión y finaliza"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Nive de depuración"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Agregar marcas de tiempo de depuración"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Mostrar marcas de tiempo con microsegundos"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Un arhivo abierto de descriptor para los registros de depuración"
diff --git a/po/eu.po b/po/eu.po
index 4447309f4..0c2dd6a5e 100644
--- a/po/eu.po
+++ b/po/eu.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Basque (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Basque (http://www.transifex.com/projects/p/sssd/language/"
"eu/)\n"
"Language: eu\n"
"MIME-Version: 1.0\n"
@@ -1041,22 +1041,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr "Inprimatu bertsio zenbakia eta irten"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Arazketa maila"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Gehitu arazketako data-zigiluak"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/fr.po b/po/fr.po
index 93be55738..4f987fd11 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -3,17 +3,18 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# MarbolanGos Fabien <marbolangos@gmail.com>, 2012
-# Jérôme Fenal <jfenal@gmail.com>, 2012-2013
+# Fabien Archambault <marbolangos@gmail.com>, 2012
+# Jérôme Fenal <jfenal@gmail.com>, 2012-2014
+# Fabien Archambault <marbolangos@gmail.com>, 2012
# Mariko Vincent <dweu60@gmail.com>, 2012
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-29 13:00+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-07-08 11:31+0000\n"
"Last-Translator: Jérôme Fenal <jfenal@gmail.com>\n"
-"Language-Team: French (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: French (http://www.transifex.com/projects/p/sssd/language/"
"fr/)\n"
"Language: fr\n"
"MIME-Version: 1.0\n"
@@ -1113,22 +1114,22 @@ msgstr "Définir un fichier de configuration différent de celui par défaut"
msgid "Print version number and exit"
msgstr "Afficher le numéro de version et quitte"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Niveau de débogage"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Ajouter l'horodatage au débogage"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Afficher l'horodatage en microsecondes"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Un descripteur de fichier ouvert pour les journaux de débogage"
@@ -1803,6 +1804,15 @@ msgstr ""
"Envoyer la sortie de débogage vers un fichier plutôt que vers la sortie "
"standard"
+#~ msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+#~ msgstr ""
+#~ "Listes des UID ou nom d'utilisateurs autorisés à accéder le répondeur "
+#~ "InfoPipe"
+
+#~ msgid "List of user attributes the InfoPipe is allowed to publish"
+#~ msgstr ""
+#~ "Liste des attributs utilisateur que l'InfoPipe est autorisé à publier"
+
#~ msgid "Whether to automatically update the client's DNS entry"
#~ msgstr "Choisir de mettre à jour automatiquement l'entrée DNS du client"
@@ -1825,6 +1835,12 @@ msgstr ""
#~ "Quel type d'authentification doit être utilisée pour effectuer la mise à "
#~ "jour DNS"
+#~ msgid "Control enumeration of trusted domains"
+#~ msgstr "Contrôle l'énumération des domaines approuvés"
+
+#~ msgid "How often should subdomains list be refreshed"
+#~ msgstr "Fréquence de rafraîchissement des sous-domaines"
+
#~ msgid ""
#~ "The amount of time in seconds between lookups of the SELinux maps against "
#~ "the IPA server"
@@ -1834,12 +1850,29 @@ msgstr ""
#~ msgstr ""
#~ "Activer les sites DNS - découverte de service basée sur l'emplacement"
+#~ msgid "Whether to use the Global Catalog for lookups"
+#~ msgstr "Choisir d'utiliser ou non le catalogue global pour les recherches"
+
+#~ msgid "Operation mode for GPO-based access control"
+#~ msgstr "Mode opératoire pour les contrôles d'accès basé sur les GPO"
+
#~ msgid "Whether to create kdcinfo files"
#~ msgstr "Choisir de créer ou non les fichiers kdcinfo"
#~ msgid "Enables enterprise principals"
#~ msgstr "Active les principals d'entreprise"
+#~ msgid "A list of extra attributes to download along with the user entry"
+#~ msgstr ""
+#~ "Une liste des attributs supplémentaires à télécharger avec l'entrée de "
+#~ "l'utilisateur"
+
+#~ msgid "Type of the group and other flags"
+#~ msgstr "Type de groupe et autres indicateurs"
+
+#~ msgid "Whether to use Token-Groups"
+#~ msgstr "Choisir d'utiliser ou non les groupes de jetons"
+
#~ msgid "Set lower boundary for allowed IDs from the LDAP server"
#~ msgstr ""
#~ "Définir la limite inférieure d'identifiants autorisés pour l'annuaire LDAP"
@@ -1848,8 +1881,34 @@ msgstr ""
#~ msgstr ""
#~ "Définir la limite supérieure d'identifiants autorisés pour l'annuaire LDAP"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
-#~ msgstr "Invalider toutes les entrées en cache hors règles sudo"
+#~ msgid ""
+#~ "After changing the OTP password, you need to log out and back in order to "
+#~ "acquire a ticket"
+#~ msgstr ""
+#~ "Après avoir modifié le mot de passe OTP, vous devez vous déconnecter et "
+#~ "vous reconnecter afin d'acquérir un ticket"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Ajouter une paire attribut/valeur. Le format est nom_attribut=valeur."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Supprimer une paire attribut/valeur. Le format est nom_attribut=valeur."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Définir une paire attribut/valeur. Le format est nom_attribut=valeur. "
+#~ "Pour les attributs multi-valués, la commande remplace les valeurs déjà "
+#~ "présentes."
+
+#~ msgid "Specify the attribute name/value pair(s)\n"
+#~ msgstr "Indiquer les paires nom d'attributs et valeurs.\n"
+
+#~ msgid "Invalidate all cached entries except for sudo rules"
+#~ msgstr "Invalider toutes les entrées en cache hormis les règles sudo"
#~ msgid ""
#~ "Could not open domain %1$s. If the domain is a subdomain (trusted "
diff --git a/po/hu.po b/po/hu.po
index 63d27ec21..1643d1f25 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -3,17 +3,18 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# ptr <ptr@ulx.hu>, 2013
-# ptr <ptr@ulx.hu>, 2011
+# Peter Bojtos <ptr@ulx.hu>, 2013
+# Peter Bojtos <ptr@ulx.hu>, 2011,2013
+# Peter Bojtos <ptr@ulx.hu>, 2011
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Hungarian (http://www.transifex.com/projects/p/fedora/"
-"language/hu/)\n"
+"Language-Team: Hungarian (http://www.transifex.com/projects/p/sssd/language/"
+"hu/)\n"
"Language: hu\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -1042,22 +1043,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Időbélyegek a hibakeresési kimenetben"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Mikroszekundum pontosságú időbélyegek"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/id.po b/po/id.po
index 70b871e7e..b0d343826 100644
--- a/po/id.po
+++ b/po/id.po
@@ -7,11 +7,11 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Indonesian (http://www.transifex.com/projects/p/fedora/"
-"language/id/)\n"
+"Language-Team: Indonesian (http://www.transifex.com/projects/p/sssd/language/"
+"id/)\n"
"Language: id\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -1040,22 +1040,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/it.po b/po/it.po
index b2b22a6be..071d6e5b4 100644
--- a/po/it.po
+++ b/po/it.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Italian (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Italian (http://www.transifex.com/projects/p/sssd/language/"
"it/)\n"
"Language: it\n"
"MIME-Version: 1.0\n"
@@ -1051,22 +1051,22 @@ msgstr "Specificare un file di configurazione specifico"
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Livello debug"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Includi timestamp di debug"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Un descrittore di file aperto per l'output di debug"
diff --git a/po/ja.po b/po/ja.po
index 6d07f9c32..001349cd7 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-08-27 03:30+0000\n"
-"Last-Translator: Tomoyuki KATO <tomo@dream.daynight.jp>\n"
-"Language-Team: Japanese (http://www.transifex.com/projects/p/fedora/language/"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
+"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
+"Language-Team: Japanese (http://www.transifex.com/projects/p/sssd/language/"
"ja/)\n"
"Language: ja\n"
"MIME-Version: 1.0\n"
@@ -1055,22 +1055,22 @@ msgstr "非標準の設定ファイルの指定"
msgid "Print version number and exit"
msgstr "バージョン番号を表示して終了する"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "デバッグレベル"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "デバッグのタイムスタンプを追加する"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "タイムスタンプをミリ秒単位で表示する"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "デバッグログのオープンファイルディスクリプター"
@@ -1763,9 +1763,6 @@ msgstr "デバッグ出力を標準エラーの代わりにファイルに送信
#~ msgid "Set upper boundary for allowed IDs from the LDAP server"
#~ msgstr "LDAP サーバーから許可される ID の上限の設定"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
-#~ msgstr "sudo ルール以外の全キャッシュ項目の無効化"
-
#~ msgid ""
#~ "Could not open domain %1$s. If the domain is a subdomain (trusted "
#~ "domain), use fully qualified name instead of --domain/-d parameter.\n"
diff --git a/po/nb.po b/po/nb.po
index 05bc9ab5e..02062a54e 100644
--- a/po/nb.po
+++ b/po/nb.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Norwegian Bokmål (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Norwegian Bokmål (http://www.transifex.com/projects/p/sssd/"
"language/nb/)\n"
"Language: nb\n"
"MIME-Version: 1.0\n"
@@ -1041,22 +1041,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/nl.po b/po/nl.po
index cc4bd4fa8..7197cc4db 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -5,6 +5,7 @@
# Translators:
# Geert Warrink <geert.warrink@onsnet.nu>, 2011-2013
# Nienke84, 2013
+# Nienke Hulzebos, 2013
# Richard E. van der Luit <nippur@fedoraproject.org>, 2012
# sgallagh <sgallagh@redhat.com>, 2011
# Wijnand Modderman-Lenstra <accounts-transifex@maze.io>, 2011
@@ -12,10 +13,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-31 11:30+0000\n"
-"Last-Translator: Geert Warrink <geert.warrink@onsnet.nu>\n"
-"Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
+"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
+"Language-Team: Dutch (http://www.transifex.com/projects/p/sssd/language/"
"nl/)\n"
"Language: nl\n"
"MIME-Version: 1.0\n"
@@ -1105,22 +1106,22 @@ msgstr "Geef een niet-standaard configuratiebestand op"
msgid "Print version number and exit"
msgstr "Print versie nummer en sluit af"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Debug niveau"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Voeg tijdstempels toe aan debugberichten"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Toon tijdstempel met microseconden"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Een geopend bestand voor de debug logs"
@@ -1826,9 +1827,6 @@ msgstr "Stuur de debuguitvoer naar bestanden in plaats van stderr"
#~ msgid "Set upper boundary for allowed IDs from the LDAP server"
#~ msgstr "Hoogste grens instellen voor toegestane id's van de LDAP-server"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
-#~ msgstr "Maak in de cache alle ingangen, behalve sudo regels, ongeldig"
-
#~ msgid ""
#~ "Could not open domain %1$s. If the domain is a subdomain (trusted "
#~ "domain), use fully qualified name instead of --domain/-d parameter.\n"
diff --git a/po/pl.po b/po/pl.po
index 82340f71a..09ca84f31 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -3,16 +3,16 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# Piotr Drąg <piotrdrag@gmail.com>, 2011-2013
+# Piotr Drąg <piotrdrag@gmail.com>, 2011-2014
# sgallagh <sgallagh@redhat.com>, 2011
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 17:40+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-05 15:51+0000\n"
"Last-Translator: Piotr Drąg <piotrdrag@gmail.com>\n"
-"Language-Team: Polish (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Polish (http://www.transifex.com/projects/p/sssd/language/"
"pl/)\n"
"Language: pl\n"
"MIME-Version: 1.0\n"
@@ -1097,22 +1097,22 @@ msgstr "Podaje niedomyślny plik konfiguracji"
msgid "Print version number and exit"
msgstr "Wyświetla numer wersji i kończy działanie"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Poziom debugowania"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Dodaje czasy debugowania"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Wyświetlanie dat z mikrosekundami"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Otwiera deskryptor pliku dla dzienników debugowania"
@@ -1771,6 +1771,14 @@ msgid "Send the debug output to files instead of stderr"
msgstr ""
"Wysyła wyjście debugowania do plików, zamiast do standardowego wyjścia błędów"
+#~ msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+#~ msgstr ""
+#~ "Lista UID lub nazw użytkowników mających dostęp do programu "
+#~ "odpowiadającego InfoPipe"
+
+#~ msgid "List of user attributes the InfoPipe is allowed to publish"
+#~ msgstr "Lista atrybutów użytkownika, które InfoPipe może publikować"
+
#~ msgid "Whether to automatically update the client's DNS entry"
#~ msgstr "Czy automatycznie aktualizować wpis DNS klienta"
@@ -1791,6 +1799,12 @@ msgstr ""
#~ "Jakiego rodzaju uwierzytelnianie powinno być używane do wykonywania "
#~ "aktualizacji DNS"
+#~ msgid "Control enumeration of trusted domains"
+#~ msgstr "Kontrola wyliczania zaufanych domen"
+
+#~ msgid "How often should subdomains list be refreshed"
+#~ msgstr "Jak często odświeżać listę poddomen"
+
#~ msgid ""
#~ "The amount of time in seconds between lookups of the SELinux maps against "
#~ "the IPA server"
@@ -1799,12 +1813,27 @@ msgstr ""
#~ msgid "Enable DNS sites - location based service discovery"
#~ msgstr "Włącza witryny DNS - wykrywanie usług w oparciu o położenie"
+#~ msgid "Whether to use the Global Catalog for lookups"
+#~ msgstr "Czy używać Global Catalog do wyszukiwań"
+
+#~ msgid "Operation mode for GPO-based access control"
+#~ msgstr "Tryb działania dla kontroli dostępu opartej na GPO"
+
#~ msgid "Whether to create kdcinfo files"
#~ msgstr "Określa, czy tworzyć pliki kdcinfo"
#~ msgid "Enables enterprise principals"
#~ msgstr "Włącza naczelników enterprise"
+#~ msgid "A list of extra attributes to download along with the user entry"
+#~ msgstr "Lista dodatkowych atrybutów do pobrania razem z wpisem użytkownika"
+
+#~ msgid "Type of the group and other flags"
+#~ msgstr "Typ grupy i inne flagi"
+
+#~ msgid "Whether to use Token-Groups"
+#~ msgstr "Czy używać Token-Groups"
+
#~ msgid "Set lower boundary for allowed IDs from the LDAP server"
#~ msgstr ""
#~ "Ustawia dolną granicę dla dozwolonych identyfikatorów z serwera LDAP"
@@ -1813,7 +1842,31 @@ msgstr ""
#~ msgstr ""
#~ "Ustawia górną granicę dla dozwolonych identyfikatorów z serwera LDAP"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
+#~ msgid ""
+#~ "After changing the OTP password, you need to log out and back in order to "
+#~ "acquire a ticket"
+#~ msgstr ""
+#~ "Po zmianie hasła OTP należy się wylogować i zalogować ponownie, aby "
+#~ "uzyskać zgłoszenie"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr "Dodaje parę atrybut/wartość. Format to nazwaatrybutu=wartość."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Usuwa parę atrybut/wartość. Format to nazwaatrybutu=wartość."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Ustawia atrybut pary nazwa/wartość. Format to nazwaatrybutu=wartość. W "
+#~ "przypadku atrybutów o wielu wartościach polecenie zastępuje obecne już "
+#~ "wartości"
+
+#~ msgid "Specify the attribute name/value pair(s)\n"
+#~ msgstr "Podaje atrybuty parom nazwa/atrybut\n"
+
+#~ msgid "Invalidate all cached entries except for sudo rules"
#~ msgstr "Unieważnia wszystkie wpisy w pamięci podręcznej oprócz reguł sudo"
#~ msgid ""
diff --git a/po/pt.po b/po/pt.po
index 7fcb9e89b..c171636ca 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -7,11 +7,11 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Portuguese (http://www.transifex.com/projects/p/fedora/"
-"language/pt/)\n"
+"Language-Team: Portuguese (http://www.transifex.com/projects/p/sssd/language/"
+"pt/)\n"
"Language: pt\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -1051,22 +1051,22 @@ msgstr "Especificar um ficheiro de configuração não standard"
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Nível de depuração"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Adicionar tempos na depuração"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Um descritor de ficheiro aberto para os registos de depuração"
diff --git a/po/ru.po b/po/ru.po
index f8d5e1916..46608c80d 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Russian (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Russian (http://www.transifex.com/projects/p/sssd/language/"
"ru/)\n"
"Language: ru\n"
"MIME-Version: 1.0\n"
@@ -1053,22 +1053,22 @@ msgstr "Указать файл конфигурации"
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Уровень отладки"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Добавить отладочные отметки времени"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Открытый дескриптор файла для журналов отладки"
diff --git a/po/sssd.pot b/po/sssd.pot
index c2ce9e263..ae4ce4249 100644
--- a/po/sssd.pot
+++ b/po/sssd.pot
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
@@ -1039,22 +1039,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/sv.po b/po/sv.po
index 1232a66ba..b16bf9387 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -3,15 +3,15 @@
# This file is distributed under the same license as the PACKAGE package.
#
# Translators:
-# Göran Uddeborg <goeran@uddeborg.se>, 2013
+# Göran Uddeborg <goeran@uddeborg.se>, 2013-2014
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-09-03 18:00+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-07 21:40+0000\n"
"Last-Translator: Göran Uddeborg <goeran@uddeborg.se>\n"
-"Language-Team: Swedish (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Swedish (http://www.transifex.com/projects/p/sssd/language/"
"sv/)\n"
"Language: sv\n"
"MIME-Version: 1.0\n"
@@ -1070,22 +1070,22 @@ msgstr "Ange en konfigurationsfil annan än standard"
msgid "Print version number and exit"
msgstr "Skriv ut versionsnumret och avsluta"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Felsökningsnivå"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Lägg till felsökningstidstämplar"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Visa tidsstämplar med mikrosekunder"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Ett öppet filhandtag för felsökningsloggarna"
@@ -1737,6 +1737,14 @@ msgstr "%1$s måste köras som root\n"
msgid "Send the debug output to files instead of stderr"
msgstr "Skicka felutskrifter till filer istället för standard fel"
+#~ msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+#~ msgstr ""
+#~ "Lista över UID:er eller användarnamn som tillåts komma åt InfoPipe-"
+#~ "svararen"
+
+#~ msgid "List of user attributes the InfoPipe is allowed to publish"
+#~ msgstr "Lista över aänvändarattribut InfoPipe får publicera"
+
#~ msgid "Whether to automatically update the client's DNS entry"
#~ msgstr "Huruvida klienternas DNS-poster uppdateras automatiskt"
@@ -1758,6 +1766,12 @@ msgstr "Skicka felutskrifter till filer istället för standard fel"
#~ "Vilken sorts autenticering som skall användas för att utföra DNS-"
#~ "uppdateringen"
+#~ msgid "Control enumeration of trusted domains"
+#~ msgstr "Styr uppräkning av betrodda domäner"
+
+#~ msgid "How often should subdomains list be refreshed"
+#~ msgstr "Hur ofta skall listan över underdomäner uppdateras"
+
#~ msgid ""
#~ "The amount of time in seconds between lookups of the SELinux maps against "
#~ "the IPA server"
@@ -1768,19 +1782,58 @@ msgstr "Skicka felutskrifter till filer istället för standard fel"
#~ msgid "Enable DNS sites - location based service discovery"
#~ msgstr "Aktivera DNS-sajter - platsbaserad detektering av tjänster"
+#~ msgid "Whether to use the Global Catalog for lookups"
+#~ msgstr "Huruvida den globala katalogen skall användas för uppslagningar"
+
+#~ msgid "Operation mode for GPO-based access control"
+#~ msgstr "Arbetsläge för GPO-baserad åtkomstkontrol"
+
#~ msgid "Whether to create kdcinfo files"
#~ msgstr "Huruvida kdcinfo-filer skall skapas"
#~ msgid "Enables enterprise principals"
#~ msgstr "Aktiverar företagshuvudmän"
+#~ msgid "A list of extra attributes to download along with the user entry"
+#~ msgstr ""
+#~ "En lista över extra attribut att hämta tillsammans med användarposten"
+
+#~ msgid "Type of the group and other flags"
+#~ msgstr "Typen av grupp och andra flaggor"
+
+#~ msgid "Whether to use Token-Groups"
+#~ msgstr "Huruvida Token-Groups skall användas"
+
#~ msgid "Set lower boundary for allowed IDs from the LDAP server"
#~ msgstr "Sätt undre gräns för tillåtna ID:n från LDAP-servern"
#~ msgid "Set upper boundary for allowed IDs from the LDAP server"
#~ msgstr "Sätt övre gräns för tillåtna ID:n från LDAP-servern"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
+#~ msgid ""
+#~ "After changing the OTP password, you need to log out and back in order to "
+#~ "acquire a ticket"
+#~ msgstr ""
+#~ "Efter att ha ändrat OTP-lösenordet behöver du logga ut och tillbaka in "
+#~ "för att få en biljett"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr "Lägg till ett attribut/värde-par. Formatet är attrnamn=värde."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Ta bort ett attribut/värde-par. Formatet är attrnamn=värde."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Sätt ett attribut till ett namn/värde-par. Formatet är attrnamn=värde. "
+#~ "För flervärda attribut ersätter kommandot de värden som redan finns."
+
+#~ msgid "Specify the attribute name/value pair(s)\n"
+#~ msgstr "Ange attributets namn/värde-par\n"
+
+#~ msgid "Invalidate all cached entries except for sudo rules"
#~ msgstr "Invalidera alla cachade poster utom sudo-regler"
#~ msgid ""
diff --git a/po/tg.po b/po/tg.po
index def6e0b65..9227947d8 100644
--- a/po/tg.po
+++ b/po/tg.po
@@ -7,10 +7,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Tajik (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Tajik (http://www.transifex.com/projects/p/sssd/language/"
"tg/)\n"
"Language: tg\n"
"MIME-Version: 1.0\n"
@@ -1040,22 +1040,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/tr.po b/po/tr.po
index ed475aed8..920fa6ebe 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Turkish (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Turkish (http://www.transifex.com/projects/p/sssd/language/"
"tr/)\n"
"Language: tr\n"
"MIME-Version: 1.0\n"
@@ -1041,22 +1041,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/uk.po b/po/uk.po
index 4d5d873e0..b24c78b5c 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -4,17 +4,17 @@
#
# Translators:
# sgallagh <sgallagh@redhat.com>, 2011
-# Yuri Chornoivan <yurchor@ukr.net>, 2011-2013
+# Yuri Chornoivan <yurchor@ukr.net>, 2011-2014
# Yuri Chornoivan <yurchor@ukr.net>, 2013
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:40+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:22+0000\n"
"Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
-"Language-Team: Ukrainian (http://www.transifex.com/projects/p/fedora/"
-"language/uk/)\n"
+"Language-Team: Ukrainian (http://www.transifex.com/projects/p/sssd/language/"
+"uk/)\n"
"Language: uk\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -1119,22 +1119,22 @@ msgstr "Вказати нетиповий файл налаштувань"
msgid "Print version number and exit"
msgstr "Вивести номер версії і завершити роботу"
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "Рівень зневаджування"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "Додавати діагностичні часові позначки"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr "Показувати мікросекунди у часових позначках"
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr "Дескриптор відкритого файла для запису журналів діагностики"
@@ -1797,6 +1797,15 @@ msgstr "%1$s слід запускати від імені користувач
msgid "Send the debug output to files instead of stderr"
msgstr "Надіслати діагностичні дані до файлів, а не до stderr"
+#~ msgid "List of UIDs or user names allowed to access the InfoPipe responder"
+#~ msgstr ""
+#~ "Список унікальних ідентифікаторів (UID) або імен користувачів, яким "
+#~ "надано доступ до відповідача InfoPipe"
+
+#~ msgid "List of user attributes the InfoPipe is allowed to publish"
+#~ msgstr ""
+#~ "Список атрибутів запису користувача, які може оприлюднювати InfoPipe"
+
#~ msgid "Whether to automatically update the client's DNS entry"
#~ msgstr "Визначає, чи слід автоматично оновлювати запис DNS клієнта"
@@ -1820,6 +1829,12 @@ msgstr "Надіслати діагностичні дані до файлів,
#~ "Визначає тип розпізнавання, який слід використовувати для виконання "
#~ "оновлення DNS"
+#~ msgid "Control enumeration of trusted domains"
+#~ msgstr "Керувати нумерацією надійних доменів"
+
+#~ msgid "How often should subdomains list be refreshed"
+#~ msgstr "Частота оновлення списку піддоменів"
+
#~ msgid ""
#~ "The amount of time in seconds between lookups of the SELinux maps against "
#~ "the IPA server"
@@ -1828,12 +1843,29 @@ msgstr "Надіслати діагностичні дані до файлів,
#~ msgid "Enable DNS sites - location based service discovery"
#~ msgstr "Увімкнути сайти DNS — визначення служб на основі адрес"
+#~ msgid "Whether to use the Global Catalog for lookups"
+#~ msgstr "Чи слід використовувати загальний каталог для пошуку"
+
+#~ msgid "Operation mode for GPO-based access control"
+#~ msgstr "Режим роботи для керування доступом на основі GPO"
+
#~ msgid "Whether to create kdcinfo files"
#~ msgstr "Визначає, чи слід створювати файли kdcinfo"
#~ msgid "Enables enterprise principals"
#~ msgstr "Увімкнути промислові реєстраційні дані"
+#~ msgid "A list of extra attributes to download along with the user entry"
+#~ msgstr ""
+#~ "Список додаткових атрибутів, які слід отримувати разом із записом "
+#~ "користувача"
+
+#~ msgid "Type of the group and other flags"
+#~ msgstr "Тип групи та інші прапорці"
+
+#~ msgid "Whether to use Token-Groups"
+#~ msgstr "Визначає, чи слід використовувати крупи реєстраційних записів"
+
#~ msgid "Set lower boundary for allowed IDs from the LDAP server"
#~ msgstr ""
#~ "Встановити нижню межу для дозволених ідентифікаторів із сервера LDAP"
@@ -1842,7 +1874,31 @@ msgstr "Надіслати діагностичні дані до файлів,
#~ msgstr ""
#~ "Встановити верхню межу для дозволених ідентифікаторів із сервера LDAP"
-#~ msgid "Invalidate all cached entries except for sudo rulese"
+#~ msgid ""
+#~ "After changing the OTP password, you need to log out and back in order to "
+#~ "acquire a ticket"
+#~ msgstr ""
+#~ "Після зміни пароля OTP вам слід вийти із системи і увійти до неї знову, "
+#~ "щоб отримати про квиток"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr "Додати пару атрибут-значення. Форматування: атрибут=значення."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Вилучити пару атрибут-значення. Форматування: атрибут=значення."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Встановити для вказаного за назвою атрибута значення. Форматування: "
+#~ "атрибут=значення. Для атрибутів з декількома значеннями команда призведе "
+#~ "до заміни поточних значень."
+
+#~ msgid "Specify the attribute name/value pair(s)\n"
+#~ msgstr "Вказати пари атрибут-значення\n"
+
+#~ msgid "Invalidate all cached entries except for sudo rules"
#~ msgstr "Скасувати чинність усіх кешованих записів, окрім правил sudo"
#~ msgid ""
diff --git a/po/zh_CN.po b/po/zh_CN.po
index 16d34e200..a5f3409f0 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/sssd/"
"language/zh_CN/)\n"
"Language: zh_CN\n"
"MIME-Version: 1.0\n"
@@ -1041,22 +1041,22 @@ msgstr ""
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/po/zh_TW.po b/po/zh_TW.po
index 497743649..b0265a5a3 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -7,10 +7,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:27+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/sssd/"
"language/zh_TW/)\n"
"Language: zh_TW\n"
"MIME-Version: 1.0\n"
@@ -1040,22 +1040,22 @@ msgstr "指定非預設的配置檔"
msgid "Print version number and exit"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2010 src/providers/ldap/ldap_child.c:435
+#: src/providers/krb5/krb5_child.c:2132 src/providers/ldap/ldap_child.c:435
#: src/util/util.h:95
msgid "Debug level"
msgstr "除錯層級"
-#: src/providers/krb5/krb5_child.c:2012 src/providers/ldap/ldap_child.c:437
+#: src/providers/krb5/krb5_child.c:2134 src/providers/ldap/ldap_child.c:437
#: src/util/util.h:99
msgid "Add debug timestamps"
msgstr "加入除錯時間戳記"
-#: src/providers/krb5/krb5_child.c:2014 src/providers/ldap/ldap_child.c:439
+#: src/providers/krb5/krb5_child.c:2136 src/providers/ldap/ldap_child.c:439
#: src/util/util.h:101
msgid "Show timestamps with microseconds"
msgstr ""
-#: src/providers/krb5/krb5_child.c:2016 src/providers/ldap/ldap_child.c:441
+#: src/providers/krb5/krb5_child.c:2138 src/providers/ldap/ldap_child.c:441
msgid "An open file descriptor for the debug logs"
msgstr ""
diff --git a/src/man/po/br.po b/src/man/po/br.po
index a20dc1d93..3c4a5a16c 100644
--- a/src/man/po/br.po
+++ b/src/man/po/br.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Breton (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Breton (http://www.transifex.com/projects/p/sssd/language/"
"br/)\n"
"Language: br\n"
"MIME-Version: 1.0\n"
@@ -4764,8 +4764,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "filter_users, filter_groups (string)"
msgid "ldap_user_search_filter (string)"
-msgstr ""
+msgstr "filter_users, filter_groups (neudennad)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -4798,8 +4800,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "filter_users, filter_groups (string)"
msgid "ldap_group_search_filter (string)"
-msgstr ""
+msgstr "filter_users, filter_groups (neudennad)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5574,8 +5578,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: memberUser"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5591,8 +5597,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: memberHost"
-msgstr ""
+msgstr "Dre zoiuer : root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5608,13 +5616,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr ""
+msgstr "Dre zoiuer : root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "full_name_format (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr ""
+msgstr "full_name_format (neudennad)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
@@ -5638,8 +5650,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "Dre zoiuer : root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5653,8 +5667,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: fqdn"
-msgstr ""
+msgstr "Dre ziouer : 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5708,8 +5724,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Dre ziouer : 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5723,8 +5741,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
@@ -5755,8 +5775,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
@@ -5770,8 +5792,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
@@ -5785,8 +5809,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
@@ -5800,8 +5826,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Dre ziouer : true"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
diff --git a/src/man/po/ca.po b/src/man/po/ca.po
index 13e254a14..97e2daab5 100644
--- a/src/man/po/ca.po
+++ b/src/man/po/ca.po
@@ -3,17 +3,20 @@
# This file is distributed under the same license as the sssd-docs package.
#
# Translators:
-# jordimash <jmas@softcatala.org>, 2012
-# muzzol mussol <muzzol@gmail.com>, 2012
+# Jordi Mas <jmas@softcatala.org>, 2012
+# Jordi Mas <jmas@softcatala.org>, 2012
+# Jordi Mas <jmas@softcatala.org>, 2014
+# muzzol <muzzol@gmail.com>, 2012
+# muzzol <muzzol@gmail.com>, 2012
# Robert Antoni Buj i Gelonch <robert.buj@gmail.com>, 2013
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Catalan (http://www.transifex.com/projects/p/sssd/language/"
"ca/)\n"
"Language: ca\n"
"MIME-Version: 1.0\n"
@@ -1205,8 +1208,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure any service."
msgid "These options can be used to configure the sudo service."
-msgstr ""
+msgstr "Aquestes opcions es poden utilitzar per a configurar qualsevol servei."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -4518,9 +4523,6 @@ msgid ""
"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
" "
msgstr ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1699
@@ -4528,8 +4530,6 @@ msgid ""
"This example means that access to this host is restricted to members of the "
"\"allowedusers\" group in ldap."
msgstr ""
-"Aquest exemple significa que l'accés a aquesta màquina està restringit als "
-"membres del grup d'ldap \"allowedusers\"."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1704
@@ -5191,8 +5191,10 @@ msgstr "ldap_group_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr ""
+msgstr "ldap_user_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -5225,8 +5227,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr ""
+msgstr "ldap_group_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5451,7 +5455,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
#: pam_sss.8.xml:117
msgid "FILES"
-msgstr "ARXIUS"
+msgstr "FITXERS"
#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:118
@@ -6079,256 +6083,375 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr ""
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr ""
+msgstr "L'atribut LDAP que llista la pertanença a grups de l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr ""
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid ""
"The LDAP attribute that lists system users and groups that are direct "
"members of the netgroup."
-msgstr ""
+msgstr "L'atribut LDAP que llista la pertanença a grups de l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberUser"
-msgstr ""
+msgstr "Per defecte: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr ""
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists hosts and host groups that are direct members "
"of the netgroup."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberHost"
-msgstr ""
+msgstr "Per defecte: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr ""
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists FQDNs of hosts and host groups that are "
"members of the netgroup."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr ""
+msgstr "Per defecte: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr ""
+msgstr "ipa_domain (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr ""
+msgstr "Per defecte: none"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_host_object_class (string)"
-msgstr ""
+msgstr "ldap_user_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
msgid "The object class of a host entry in LDAP."
-msgstr ""
+msgstr "La classe d'objecte d'una entrada d'usuari a LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "Per defecte: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr ""
+msgstr "ipa_hostname (cadeba)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains FQDN of the host."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr ""
+msgstr "Per defecte: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
+msgstr "ldap_user_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ldap_user_name (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
+msgstr "ldap_user_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ldap_user_member_of (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
+msgstr "ldap_user_member_of (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid ""
"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ldap_user_member_of (string)"
msgid "ipa_selinux_usermap_member_host (string)"
-msgstr ""
+msgstr "ldap_user_member_of (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
msgid ""
"The LDAP attribute that contains all hosts / hostgroups this rule match "
"against."
msgstr ""
+"L'atribut LDAP que conté les tripletes netgroup (maquina, usuari, domini)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "simple_deny_users (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
+msgstr "simple_deny_users (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that contains DN of HBAC rule which can be used for "
"matching instead of memberUser and memberHost"
-msgstr ""
+msgstr "L'atribut LDAP que conté els noms dels membres del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Per defecte: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "simple_deny_users (string)"
msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr ""
+msgstr "simple_deny_users (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains SELinux user string itself."
msgstr ""
+"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
+"l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Per defecte: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ldap_user_name (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
+msgstr "ldap_user_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid ""
"The LDAP attribute that contains whether or not is user map enabled for "
"usage."
msgstr ""
+"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
+"l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: ldap"
msgid "Default: ipaEnabledFlag"
-msgstr ""
+msgstr "Per defecte: ldap"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ldap_user_name (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
+msgstr "ldap_user_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains user category such as 'all'."
msgstr ""
+"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
+"l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Per defecte: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ldap_user_home_directory (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
+msgstr "ldap_user_home_directory (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains host category such as 'all'."
msgstr ""
+"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
+"l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: hard"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Per defecte: hard"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ldap_user_uuid (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
+msgstr "ldap_user_uuid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr ""
+msgstr "L'atribut LDAP que conté el nom del directori personal de l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Per defecte: nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
+msgstr "ipa_hostname (cadeba)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
+"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
+"l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Per defecte: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -8821,24 +8944,34 @@ msgstr ""
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid "<emphasis>2</emphasis>: show informational messages"
msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr ""
+msgstr "<emphasis>2</emphasis>: Mostra missatges informatius"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>0</emphasis>: do not show any message"
msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr ""
+msgstr "<emphasis>0</emphasis>: no mostris cap missatge"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
msgstr ""
+"<emphasis>3</emphasis>: Mostra tots els missatges i informació de depuració"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid ""
"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
msgstr ""
+"<emphasis>3</emphasis>: Mostra tots els missatges i informació de depuració"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
@@ -8849,8 +8982,11 @@ msgstr ""
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
msgstr ""
+"<emphasis>3</emphasis>: Mostra tots els missatges i informació de depuració"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:46
diff --git a/src/man/po/de.po b/src/man/po/de.po
new file mode 100644
index 000000000..306745395
--- /dev/null
+++ b/src/man/po/de.po
@@ -0,0 +1,12194 @@
+# SOME DESCRIPTIVE TITLE
+# Copyright (C) YEAR Red Hat
+# This file is distributed under the same license as the sssd-docs package.
+#
+# Translators:
+# Chris Leick <c.leick@vollbio.de>, 2013
+# Fabian Affolter <fab@fedoraproject.org>, 2011
+# Mario Blättermann <mario.blaettermann@gmail.com>, 2014
+msgid ""
+msgstr ""
+"Project-Id-Version: SSSD\n"
+"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-09 18:21+0000\n"
+"Last-Translator: Mario Blättermann <mario.blaettermann@gmail.com>\n"
+"Language-Team: German (http://www.transifex.com/projects/p/sssd/language/"
+"de/)\n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#. type: Content of: <reference><title>
+#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
+#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
+#: sssd-ad.5.xml:5 sssd-sudo.5.xml:5 sssd.8.xml:5 sss_obfuscate.8.xml:5
+#: sss_useradd.8.xml:5 sssd-krb5.5.xml:5 sss_groupadd.8.xml:5
+#: sss_userdel.8.xml:5 sss_groupdel.8.xml:5 sss_groupshow.8.xml:5
+#: sss_usermod.8.xml:5 sss_cache.8.xml:5 sss_debuglevel.8.xml:5
+#: sss_seed.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
+#: sss_ssh_knownhostsproxy.1.xml:5
+msgid "SSSD Manual pages"
+msgstr "SSSD-Handbuchseiten"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
+msgid "sss_groupmod"
+msgstr "sss_groupmod"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
+#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
+#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
+#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
+#: sss_debuglevel.8.xml:11 sss_seed.8.xml:11
+msgid "8"
+msgstr "8"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupmod.8.xml:16
+msgid "modify a group"
+msgstr "Ändern einer Gruppe"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupmod.8.xml:21
+msgid ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPPE</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
+#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
+#: sssd-ad.5.xml:21 sssd-sudo.5.xml:21 sssd.8.xml:29 sss_obfuscate.8.xml:30
+#: sss_useradd.8.xml:30 sssd-krb5.5.xml:21 sss_groupadd.8.xml:30
+#: sss_userdel.8.xml:30 sss_groupdel.8.xml:30 sss_groupshow.8.xml:30
+#: sss_usermod.8.xml:30 sss_cache.8.xml:29 sss_debuglevel.8.xml:30
+#: sss_seed.8.xml:31 sss_ssh_authorizedkeys.1.xml:30
+#: sss_ssh_knownhostsproxy.1.xml:31
+msgid "DESCRIPTION"
+msgstr "BESCHREIBUNG"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupmod.8.xml:32
+msgid ""
+"<command>sss_groupmod</command> modifies the group to reflect the changes "
+"that are specified on the command line."
+msgstr ""
+"<command>sss_groupmod</command> ändert die Gruppe, um die auf der "
+"Befehlszeile angegebenen Änderungen widerzuspiegeln."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
+#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
+#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
+#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_seed.8.xml:42
+#: sss_ssh_authorizedkeys.1.xml:75 sss_ssh_knownhostsproxy.1.xml:62
+msgid "OPTIONS"
+msgstr "OPTIONEN"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
+msgid ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GRUPPEN</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:48
+msgid ""
+"Append this group to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+"hängt diese Gruppe an die Gruppen an, die durch den Parameter "
+"<replaceable>GRUPPEN</replaceable> angegeben wurden. Der Parameter "
+"<replaceable>GRUPPEN</replaceable> ist eine durch Kommata getrennte Liste "
+"von Gruppennamen."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
+msgid ""
+"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-r</option>,<option>--remove-group</option> <replaceable>GRUPPEN</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:62
+msgid ""
+"Remove this group from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+"entfernt diese Gruppe von den Gruppen, die durch den Parameter "
+"<replaceable>GRUPPEN</replaceable> angegeben wurden."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
+msgid "sssd.conf"
+msgstr "sssd.conf"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
+#: sssd-ipa.5.xml:11 sssd-ad.5.xml:11 sssd-sudo.5.xml:11 sssd-krb5.5.xml:11
+msgid "5"
+msgstr "5"
+
+#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
+#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
+#: sssd-ipa.5.xml:12 sssd-ad.5.xml:12 sssd-sudo.5.xml:12 sssd-krb5.5.xml:12
+msgid "File Formats and Conventions"
+msgstr "Dateiformate und Konventionen"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
+#: sssd-ipa.5.xml:17 sssd-ad.5.xml:17 sssd-krb5.5.xml:17
+msgid "the configuration file for SSSD"
+msgstr "die Konfigurationsdatei für SSSD"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:21
+msgid "FILE FORMAT"
+msgstr "DATEIFORMAT"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:29
+#, no-wrap
+msgid ""
+" <replaceable>[section]</replaceable>\n"
+" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
+" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
+" "
+msgstr ""
+" <replaceable>[Abschnitt]</replaceable>\n"
+" <replaceable>Schlüssel</replaceable> = <replaceable>Wert</replaceable>\n"
+" <replaceable>Schlüssel2</replaceable> = <replaceable>Wert2,Wert3</replaceable>\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:24
+msgid ""
+"The file has an ini-style syntax and consists of sections and parameters. A "
+"section begins with the name of the section in square brackets and continues "
+"until the next section begins. An example of section with single and multi-"
+"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+"Die Datei hat eine Syntax im Ini-Stil. Sie besteht aus Abschnitten und "
+"Parametern. Ein Abschnitt beginnt mit dem Namen des Abschnitts in eckigen "
+"Klammern und dauert bis zum Anfang des nächsten Abschnitts. Ein Beispiel "
+"eines Abschnitts mit Parametern, die einzelne und mehrere Werte haben: "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:36
+msgid ""
+"The data types used are string (no quotes needed), integer and bool (with "
+"values of <quote>TRUE/FALSE</quote>)."
+msgstr ""
+"Die benutzten Datentypen sind Zeichenkette (keine Anführungszeichen nötig), "
+"Ganzzahl und Boolesch (mit den Werten »TRUE« und »FALSE«)."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:41
+msgid ""
+"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
+"(<quote>;</quote>). Inline comments are not supported."
+msgstr ""
+"Eine Kommentarzeile beginnt mit einem Rautenzeichen (»#«) oder einem "
+"Strichpunkt (»;«). Kommentare innerhalb von Zeilen werden nicht unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:47
+msgid ""
+"All sections can have an optional <replaceable>description</replaceable> "
+"parameter. Its function is only as a label for the section."
+msgstr ""
+"Alle Abschnitte können einen optionalen Parameter <replaceable>Beschreibung</"
+"replaceable> haben. Er dient nur als Beschriftung eines Abschnitts."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:53
+msgid ""
+"<filename>sssd.conf</filename> must be a regular file, owned by root and "
+"only root may read from or write to the file."
+msgstr ""
+"<filename>sssd.conf</filename> muss eine normale Datei sein, die Root gehört "
+"und die nur von Root gelesen oder geschrieben werden darf."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:59
+msgid "SPECIAL SECTIONS"
+msgstr "BESONDERE ABSCHNITTE"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:62
+msgid "The [sssd] section"
+msgstr "Der Abschnitt [sssd]"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
+#: sssd.conf.5.xml:71 sssd.conf.5.xml:1771
+msgid "Section parameters"
+msgstr "Abschnittsparameter"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:73
+msgid "config_file_version (integer)"
+msgstr "config_file_version (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:76
+msgid ""
+"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
+"version 2."
+msgstr ""
+"gibt die Syntax der Konfigurationsdatei an. SSSD 0.6.0 und neuer benutzen "
+"Version 2."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:82
+msgid "services"
+msgstr "Dienste"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:85
+msgid ""
+"Comma separated list of services that are started when sssd itself starts."
+msgstr ""
+"Durch Kommata getrennte Liste der Dienste, die beim Start von SSSD selbst "
+"gestartet werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:89
+#, fuzzy
+#| msgid ""
+#| "Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</"
+#| "phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
+#| "condition=\"with_ssh\">, ssh</phrase> <phrase condition="
+#| "\"with_pac_responder\">, pac</phrase> <phrase condition=\"with_ifp\">, "
+#| "ifp</phrase>"
+msgid ""
+"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
+"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
+"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
+"phrase>"
+msgstr ""
+"Unterstützte Dienste sind: nss, pam <phrase condition=\"with_sudo\">, sudo</"
+"phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
+"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
+"\">, pac</phrase> <phrase condition=\"with_ifp\">, ifp</phrase>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
+msgid "reconnection_retries (integer)"
+msgstr "reconnection_retries (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:101 sssd.conf.5.xml:293
+msgid ""
+"Number of times services should attempt to reconnect in the event of a Data "
+"Provider crash or restart before they give up"
+msgstr ""
+"Anzahl der Versuche, die ein Dienst unternehmen sollte, um sich erneut zu "
+"verbinden, bevor er aufgibt, falls ein Datenanbieter abgestürzt ist oder neu "
+"startet."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:106 sssd.conf.5.xml:298
+msgid "Default: 3"
+msgstr "Voreinstellung: 3"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:111
+msgid "domains"
+msgstr "Domains"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:114
+#, fuzzy
+#| msgid ""
+#| "A domain is a database containing user information. SSSD can use more "
+#| "domains at the same time, but at least one must be configured or SSSD "
+#| "won't start. This parameter described the list of domains in the order "
+#| "you want them to be queried. A domain name should only consist of "
+#| "alphanumeric ASCII characters, dashes and underscores."
+msgid ""
+"A domain is a database containing user information. SSSD can use more "
+"domains at the same time, but at least one must be configured or SSSD won't "
+"start. This parameter described the list of domains in the order you want "
+"them to be queried."
+msgstr ""
+"Eine Domain ist eine Datenbank, die Benutzerinformationen enthält. SSSD kann "
+"mehrere Domains gleichzeitig verwenden, eine muss aber mindestens "
+"konfiguriert sein, sonst würde SSSD nicht starten. Dieser Parameter "
+"beschreibt die Liste der Domains in der Reihenfolge, in der Sie sie abfragen "
+"möchten. Ein Domain-Name sollte nur aus alphanumerischen ASCII-Zeichen, "
+"Gedankenstrichen und Unterstrichen bestehen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:124 sssd.conf.5.xml:1551
+msgid "re_expression (string)"
+msgstr "re_expression (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:127
+msgid ""
+"Default regular expression that describes how to parse the string containing "
+"user name and domain into these components."
+msgstr ""
+"voreingestellter regulärer Ausdruck, der beschreibt, in welche Bestandteile "
+"die Zeichenkette mit Benutzernamen und Domain bei der Auswertung zerlegt "
+"werden sollen."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:132
+msgid ""
+"Each domain can have an individual regular expression configured. For some "
+"ID providers there are also default regular expressions. See DOMAIN "
+"SECTIONS for more info on these regular expressions."
+msgstr ""
+"Für jede Domain kann ein individueller regulärer Ausdruck konfiguriert "
+"werden. Für einige ID-Anbieter gibt es auch voreingestellte reguläre "
+"Ausdrücke. Weitere Informationen über diese regulären Ausdrücke finden Sie "
+"unter DOMAIN-ABSCHNITTE."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:141 sssd.conf.5.xml:1598
+msgid "full_name_format (string)"
+msgstr "full_name_format (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:144
+#, fuzzy
+#| msgid ""
+#| "A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+#| "manvolnum> </citerefentry>-compatible format that describes how to "
+#| "compose a fully qualified name from user name and domain name components."
+msgid ""
+"The default <citerefentry> <refentrytitle>printf</refentrytitle> "
+"<manvolnum>3</manvolnum> </citerefentry>-compatible format that describes "
+"how to translate a (name, domain) tuple into a fully qualified name."
+msgstr ""
+"ein mit <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+"manvolnum> </citerefentry> kompatibles Format, das beschreibt, wie ein voll "
+"qualifizierter Name aus den Bestandteilen Benutzername und Domain-Name "
+"zusammengestellt wird."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:152
+msgid ""
+"Each domain can have an individual format string configured. see DOMAIN "
+"SECTIONS for more info on this option."
+msgstr ""
+"Für jede Domain kann eine individuelle Formatzeichenkette konfiguriert "
+"werden. Weitere Informationen über diese Option finden Sie unter DOMAIN-"
+"ABSCHNITTE."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:158
+msgid "try_inotify (boolean)"
+msgstr "try_inotify (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:161
+msgid ""
+"SSSD monitors the state of resolv.conf to identify when it needs to update "
+"its internal DNS resolver. By default, we will attempt to use inotify for "
+"this, and will fall back to polling resolv.conf every five seconds if "
+"inotify cannot be used."
+msgstr ""
+"SSSD überwacht den Status der »resolv.conf«, um festzustellen, wann es "
+"seinen internen DNS-Resolver aktualisieren muss. Standardmäßig werden wir "
+"versuchen, dafür Inotify zu benutzen. Falls Inotify nicht benutzt werden "
+"kann, werden wir darauf zurückgreifen, alle fünf Sekunden »resolv.conf« "
+"abzufragen."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:169
+msgid ""
+"There are some limited situations where it is preferred that we should skip "
+"even trying to use inotify. In these rare cases, this option should be set "
+"to 'false'"
+msgstr ""
+"Es gibt ein paar begrenzte Situationen, in denen wir den Versuch, Inotify zu "
+"benutzen, vorzugsweise überspringen sollten. In diesen seltenen Fällen "
+"sollte diese Option auf »false« gesetzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:175
+msgid ""
+"Default: true on platforms where inotify is supported. False on other "
+"platforms."
+msgstr ""
+"Voreinstellung: »true« auf Plattformen, auf denen Inotify unterstützt wird, "
+"»false« auf anderen Plattformen."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:179
+msgid ""
+"Note: this option will have no effect on platforms where inotify is "
+"unavailable. On these platforms, polling will always be used."
+msgstr ""
+"Hinweis: Diese Option wird auf Plattformen, auf denen Inotify nicht "
+"verfügbar ist, keine Auswirkungen haben."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:186
+msgid "krb5_rcache_dir (string)"
+msgstr "krb5_rcache_dir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:189
+msgid ""
+"Directory on the filesystem where SSSD should store Kerberos replay cache "
+"files."
+msgstr ""
+"Verzeichnis auf dem Dateisystem, auf dem SSSD Dateien des Kerberos-Replay-"
+"Zwischenspeichers speichern sollte."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:193
+msgid ""
+"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
+"SSSD to let libkrb5 decide the appropriate location for the replay cache."
+msgstr ""
+"Diese Option akzeptiert einen besonderen Wert, __LIBKRB5_DEFAULTS__, der "
+"SSSD anweisen wird, Libkrb5 die Entscheidung zu überlassen, wo der geeignete "
+"Ort für den Replay-Zwischenspeicher ist."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:199
+msgid ""
+"Default: Distribution-specific and specified at build-time. "
+"(__LIBKRB5_DEFAULTS__ if not configured)"
+msgstr ""
+"Voreinstellung: ahängig von der Distribution und zur Bauzeit angegeben "
+"(__LIBKRB5_DEFAULTS__, falls nicht konfiguriert)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:206
+msgid "default_domain_suffix (string)"
+msgstr "default_domain_suffix (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:209
+msgid ""
+"This string will be used as a default domain name for all names without a "
+"domain name component. The main use case is environments where the primary "
+"domain is intended for managing host policies and all users are located in a "
+"trusted domain. The option allows those users to log in just with their "
+"user name without giving a domain name as well."
+msgstr ""
+"Diese Zeichenkette wird als Standard-Domain-Name für alle Namen ohne einen "
+"Domain-Namensbestandteil benutzt. Hauptsächlich wird dies in Umgebungen "
+"benutzt, in denen die primäre Domain zur Verwaltung von Rechnerrichtlinien "
+"gedacht ist und sich alle Anwender in einer vertrauenswürdigen Domain "
+"befinden. Die Option ermöglicht diesen Anwendern die Anmeldung allein mit "
+"ihrem Benutzernamen ohne auch eine Domain anzugeben."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:219
+msgid ""
+"Please note that if this option is set all users from the primary domain "
+"have to use their fully qualified name, e.g. user@domain.name, to log in."
+msgstr ""
+"Bitte beachten Sie, dass alle Benutzer von der primären Domain, falls diese "
+"Option gesetzt ist, zur Anmeldung ihren voll qualifizierten Namen, z.B. "
+"benutzer@domain.name verwenden müssen."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:225 sssd-ldap.5.xml:1357 sssd-ldap.5.xml:1369
+#: sssd-ldap.5.xml:1430 sssd-ldap.5.xml:2276 sssd-ldap.5.xml:2303
+#: sssd-krb5.5.xml:366 include/ldap_id_mapping.xml:145
+#: include/ldap_id_mapping.xml:156
+msgid "Default: not set"
+msgstr "Voreinstellung: nicht gesetzt"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:64
+msgid ""
+"Individual pieces of SSSD functionality are provided by special SSSD "
+"services that are started and stopped together with SSSD. The services are "
+"managed by a special service frequently called <quote>monitor</quote>. The "
+"<quote>[sssd]</quote> section is used to configure the monitor as well as "
+"some other important options like the identity domains. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Individuelle Teile der SSSD-Funktionalität werden durch spezielle SSSD-"
+"Dienste bereitgestellt, die zusammen mit SSSD gestartet und gestoppt werden. "
+"Die Dienste werden durch einen speziellen Dienst, oft »Monitor« genannt, "
+"verwaltet. Der Abschnitt »[sssd]« wird sowohl zum Konfigurieren des Monitors "
+"als auch einiger anderer wichtiger Optionen wie den »Identity Domains« "
+"verwendet. <placeholder type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:236
+msgid "SERVICES SECTIONS"
+msgstr "DIENSTABSCHNITTE"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:238
+msgid ""
+"Settings that can be used to configure different services are described in "
+"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
+"section, for example, for NSS service, the section would be <quote>[nss]</"
+"quote>"
+msgstr ""
+"Dieser Abschnitt beschreibt Einstellungen, die zum Konfigurieren mehrerer "
+"unterschiedlicher Dienste benutzt werden. Sie sollten im Abschnitt "
+"[<replaceable>$NAME</replaceable>] liegen, für den Dienst NSS wäre der "
+"Abschnitt zum Beispiel <quote>[nss]</quote>."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:245
+msgid "General service configuration options"
+msgstr "Allgemeine Optionen zum Konfigurieren von Diensten"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:247
+msgid "These options can be used to configure any service."
+msgstr "Diese Optionen können zur Konfiguration jedes Dienstes benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:251
+msgid "debug_level (integer)"
+msgstr "debug_level (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:255
+msgid "debug_timestamps (bool)"
+msgstr "debug_timestamps (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:258
+msgid "Add a timestamp to the debug messages"
+msgstr "fügt den Debug-Nachrichten einen Zeitstempel hinzu"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:261 sssd.conf.5.xml:441 sssd.conf.5.xml:841
+#: sssd-ldap.5.xml:1503 sssd-ldap.5.xml:1629 sssd-ldap.5.xml:2064
+#: sssd-ldap.5.xml:2129 sssd-ldap.5.xml:2147 sssd-ipa.5.xml:250
+#: sssd-ipa.5.xml:285
+msgid "Default: true"
+msgstr "Voreinstellung: »true«"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:266
+msgid "debug_microseconds (bool)"
+msgstr "debug_microseconds (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:269
+msgid "Add microseconds to the timestamp in debug messages"
+msgstr "fügt dem Zeitstempel der Debug-Nachrichten Mikrosekunden hinzu"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:272 sssd.conf.5.xml:795 sssd.conf.5.xml:1705
+#: sssd-ldap.5.xml:640 sssd-ldap.5.xml:1398 sssd-ldap.5.xml:1417
+#: sssd-ldap.5.xml:1572 sssd-ldap.5.xml:1860 sssd-ipa.5.xml:129
+#: sssd-ipa.5.xml:345 sssd-krb5.5.xml:244 sssd-krb5.5.xml:278
+#: sssd-krb5.5.xml:427
+msgid "Default: false"
+msgstr "Voreinstellung: »false«"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:277
+msgid "timeout (integer)"
+msgstr "timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:280
+msgid ""
+"Timeout in seconds between heartbeats for this service. This is used to "
+"ensure that the process is alive and capable of answering requests."
+msgstr ""
+"Zeitüberschreitung in Sekunden zwischen Herzschlägen dieses Dienstes. Dies "
+"dient dazu, sicherzustellen, dass ein Prozess läuft und in der Lage ist, "
+"Anfragen zu beantworten."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:285 sssd-ldap.5.xml:1269
+msgid "Default: 10"
+msgstr "Voreinstellung: 10"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:303
+msgid "fd_limit"
+msgstr "fd_limit"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:306
+msgid ""
+"This option specifies the maximum number of file descriptors that may be "
+"opened at one time by this SSSD process. On systems where SSSD is granted "
+"the CAP_SYS_RESOURCE capability, this will be an absolute setting. On "
+"systems without this capability, the resulting value will be the lower value "
+"of this or the limits.conf \"hard\" limit."
+msgstr ""
+"Diese Option gibt die maximale Anzahl von Dateideskriptoren an, die "
+"gleichzeitig durch diesen SSSD-Prozess geöffnet sein können. Auf Systemen, "
+"auf denen SSSD die Fähigkeit CAP_SYS_RESOURCE gewährt wird, wird dies eine "
+"absolute Einstellung sein. Auf Systemen ohne diese Fähigkeit wird der "
+"resultierende Wert der niedrigere Wert hiervon oder der der »harten« "
+"Begrenzung in der »limit.conf« sein."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:315
+msgid "Default: 8192 (or limits.conf \"hard\" limit)"
+msgstr "Voreinstellung: 8192 (oder die »harte« Begrenzung der »limit.conf«)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:320
+msgid "client_idle_timeout"
+msgstr "client_idle_timeout"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:323
+msgid ""
+"This option specifies the number of seconds that a client of an SSSD process "
+"can hold onto a file descriptor without communicating on it. This value is "
+"limited in order to avoid resource exhaustion on the system."
+msgstr ""
+"Diese Option gibt die Anzahl der Sekunden an, während der ein Client eines "
+"SSSD-Prozesses einen Dateideskriptor behalten kann, ohne damit zu "
+"kommunizieren. Dieser Wert wird begrenzt, um zu verhindern, dass Ressourcen "
+"des Systems blockiert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:330 sssd.conf.5.xml:346 sssd.conf.5.xml:613
+#: sssd.conf.5.xml:773 sssd.conf.5.xml:1009 sssd-ldap.5.xml:1099
+msgid "Default: 60"
+msgstr "Voreinstellung: 60"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:335 sssd.conf.5.xml:998
+msgid "force_timeout (integer)"
+msgstr "force_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:338 sssd.conf.5.xml:1001
+msgid ""
+"If a service is not responding to ping checks (see the <quote>timeout</"
+"quote> option), it is first sent the SIGTERM signal that instructs it to "
+"quit gracefully. If the service does not terminate after "
+"<quote>force_timeout</quote> seconds, the monitor will forcibly shut it down "
+"by sending a SIGKILL signal."
+msgstr ""
+"Falls ein Dienst nicht auf Ping-Prüfungen antwortet (siehe die Option "
+"»timeout«), wird ihm zuerst das Signal SIGTERM gesendet, das ihn anweist "
+"anstandslos zu enden. Falls der Dienst sich nicht nach »force_timeout« "
+"Sekunden beendet, wird der Monitor sein Beenden durch Senden des Signals "
+"SIGKILL erzwingen."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:354
+msgid "NSS configuration options"
+msgstr "NSS-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:356
+msgid ""
+"These options can be used to configure the Name Service Switch (NSS) service."
+msgstr ""
+"Diese Optionen können zum Konfigurieren des »Name Service Switch« (NSS) "
+"benutzt werden"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:361
+msgid "enum_cache_timeout (integer)"
+msgstr "enum_cache_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:364
+msgid ""
+"How many seconds should nss_sss cache enumerations (requests for info about "
+"all users)"
+msgstr ""
+"Wieviele Sekunden soll »nss_sss« Aufzählungen (Abfragen von Informationen "
+"über alle Nutzer) zwischenspeichern?"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:368
+msgid "Default: 120"
+msgstr "Voreinstellung: 120"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:373
+msgid "entry_cache_nowait_percentage (integer)"
+msgstr "entry_cache_nowait_percentage (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:376
+msgid ""
+"The entry cache can be set to automatically update entries in the background "
+"if they are requested beyond a percentage of the entry_cache_timeout value "
+"for the domain."
+msgstr ""
+"Der Eintragszwischenspeicher kann auf automatisch im Hintergrund "
+"aktualisierte Einträge gestellt werden, falls sie jenseits eines "
+"Prozentsatzes des Wertes »entry_cache_timeout« für die Domain abgefragt "
+"werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:382
+msgid ""
+"For example, if the domain's entry_cache_timeout is set to 30s and "
+"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
+"after 15 seconds past the last cache update will be returned immediately, "
+"but the SSSD will go and update the cache on its own, so that future "
+"requests will not need to block waiting for a cache update."
+msgstr ""
+"Falls zum Beispiel die Zeitüberschreitung für den Eintragszwischenspeicher "
+"der Domain auf 30s und »entry_cache_nowait_percentage« auf 50 Prozent "
+"gesetzt wurde, werden Einträge, die in den letzten 15 Sekunden nach der "
+"letzen Zwischenspeicheraktualisierung hereinkamen, sofort zurückgegeben, "
+"SSSD wird aber den Zwischenspeicher selbst aktualisieren, so dass zukünftige "
+"Abfragen nicht blockiert werden müssen, um auf eine "
+"Zwischenspeicheraktualisierung zu warten."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:392
+msgid ""
+"Valid values for this option are 0-99 and represent a percentage of the "
+"entry_cache_timeout for each domain. For performance reasons, this "
+"percentage will never reduce the nowait timeout to less than 10 seconds. (0 "
+"disables this feature)"
+msgstr ""
+"Gültige Werte für diese Option sind 0-99. Sie geben die Prozentzahl des "
+"»entry_cache_timeout« für jede Domain an. Aus Leistungsgründen wird diese "
+"Prozentzahl die »nowait«-Zeitüberschreitung nie auf weniger als zehn "
+"Sekunden senken. (0 schaltet diese Funktionalität aus.)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:400
+msgid "Default: 50"
+msgstr "Voreinstellung: 50"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:405
+msgid "entry_negative_timeout (integer)"
+msgstr "entry_negative_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:408
+msgid ""
+"Specifies for how many seconds nss_sss should cache negative cache hits "
+"(that is, queries for invalid database entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+"gibt an, für wie viele Sekunden lang »nss_sss« negative "
+"Zwischenspeichertreffer zwischenspeichern soll (das heißt, Abfragen "
+"ungültiger Datenbankeinträge, wie solche, die nicht existieren), bevor das "
+"Backend erneut gefragt wird)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:414 sssd.conf.5.xml:819 sssd-krb5.5.xml:226
+msgid "Default: 15"
+msgstr "Voreinstellung: 15"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:419
+msgid "filter_users, filter_groups (string)"
+msgstr "filter_users, filter_groups (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:422
+msgid ""
+"Exclude certain users from being fetched from the sss NSS database. This is "
+"particularly useful for system accounts. This option can also be set per-"
+"domain or include fully-qualified names to filter only users from the "
+"particular domain."
+msgstr ""
+"schließt bestimmte Nutzer von der Abfrage aus der SSS-NSS-Datenbank aus, was "
+"insbesondere für Systemkonten nützlich ist. Diese Option kann auch pro "
+"Domain gesetzt werden oder voll qualifizierte Namen enthalten, um nur Nutzer "
+"von einer bestimmten Domain herauszufiltern."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:429
+msgid "Default: root"
+msgstr "Voreinstellung: root"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:434
+msgid "filter_users_in_groups (bool)"
+msgstr "filter_users_in_groups (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:437
+msgid ""
+"If you want filtered user still be group members set this option to false."
+msgstr ""
+"Falls Sie möchten, dass gefilterte Nutzer weiterhin Gruppenmitglieder sind, "
+"setzen Sie diese Option auf »false«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:446 sssd-ad.5.xml:132
+msgid "override_homedir (string)"
+msgstr "override_homedir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:455 sssd-ad.5.xml:141 sssd-krb5.5.xml:169
+msgid "%u"
+msgstr "%u"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:456 sssd-ad.5.xml:142 sssd-krb5.5.xml:170
+msgid "login name"
+msgstr "Anmeldename"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:459 sssd-ad.5.xml:145 sssd-krb5.5.xml:173
+msgid "%U"
+msgstr "%U"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:460 sssd-ad.5.xml:146
+msgid "UID number"
+msgstr "UID-Nummer"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:463 sssd-ad.5.xml:149 sssd-krb5.5.xml:191
+msgid "%d"
+msgstr "%d"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:464 sssd-ad.5.xml:150
+msgid "domain name"
+msgstr "Domain-Name"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:467 sssd-ad.5.xml:153
+msgid "%f"
+msgstr "%f"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:468 sssd-ad.5.xml:154
+msgid "fully qualified user name (user@domain)"
+msgstr "voll qualifizierter Benutzername (Benutzer@Domain)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:471
+msgid "%o"
+msgstr "%o"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:473
+msgid "The original home directory retrieved from the identity provider."
+msgstr "das Original-Home-Verzeichnis, das vom Identitätsanbieter geholt wurde"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:478 sssd-ad.5.xml:157 sssd-krb5.5.xml:203
+msgid "%%"
+msgstr "%%"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:479 sssd-ad.5.xml:158 sssd-krb5.5.xml:204
+msgid "a literal '%'"
+msgstr "ein buchstäbliches »%«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:449 sssd-ad.5.xml:135
+msgid ""
+"Override the user's home directory. You can either provide an absolute value "
+"or a template. In the template, the following sequences are substituted: "
+"<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+"setzt das Home-Verzeichnis des Benutzers außer Kraft. Sie können entweder "
+"einen absoluten Wert oder eine Schablone bereitstellen. In der Schablone "
+"werden die folgenden Sequenzen ersetzt: <placeholder type=\"variablelist\" "
+"id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:485 sssd-ad.5.xml:164
+msgid "This option can also be set per-domain."
+msgstr "Diese Option kann auch pro Domain gesetzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
+#, fuzzy, no-wrap
+#| msgid ""
+#| "fallback_homedir = /home/%u\n"
+#| " "
+msgid ""
+"override_homedir = /home/%u\n"
+" "
+msgstr ""
+"fallback_homedir = /home/%u\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:488 sssd.conf.5.xml:512 sssd-ad.5.xml:167 sssd-ad.5.xml:191
+msgid "example: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr "Beispiel: <placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:494 sssd-ad.5.xml:173
+msgid "Default: Not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+"Voreinstellung: nicht gesetzt (SSSD wird den von LDAP geholten Wert benutzen)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:500 sssd-ad.5.xml:179
+msgid "fallback_homedir (string)"
+msgstr "fallback_homedir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:503 sssd-ad.5.xml:182
+msgid ""
+"Set a default template for a user's home directory if one is not specified "
+"explicitly by the domain's data provider."
+msgstr ""
+"setzt eine Standardschablone für das Home-Verzeichnis eines Nutzers, falls "
+"es nicht explizit durch den Datenanbieter der Domain angegeben wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:508 sssd-ad.5.xml:187
+msgid ""
+"The available values for this option are the same as for override_homedir."
+msgstr ""
+"Die für diese Option verfügbaren Werte sind dieselben wie für "
+"»override_homedir«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:518 sssd-ad.5.xml:197
+msgid "Default: not set (no substitution for unset home directories)"
+msgstr ""
+"Voreinstellung: nicht gesetzt (kein Ersetzen nicht gesetzter Home-"
+"Verzeichnisse)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:524
+msgid "override_shell (string)"
+msgstr "override_shell (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:527
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
+msgid ""
+"Override the login shell for all users. This option can be specified "
+"globally in the [nss] section or per-domain."
+msgstr ""
+"Setzt die Anmeldeshell für alle Benutzer außer Kraft. Diese Option genießt "
+"Vorrecht vor allen anderen Shell-Optionen, falls sie Wirkung zeigt und kann "
+"entweder im Abschnitt [nss] oder für jede Domain gesetzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:532
+msgid "Default: not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+"Voreinstellung: nicht gesetzt (SSSD wird den von LDAP erhaltenen Wert "
+"benutzen)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:538
+msgid "allowed_shells (string)"
+msgstr "allowed_shells (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:541
+msgid ""
+"Restrict user shell to one of the listed values. The order of evaluation is:"
+msgstr ""
+"beschränkt die Shell des Nutzers auf eine der aufgeführten Werte. Die "
+"Reihenfolge der Auswertung ist:"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:544
+msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
+msgstr "1. Falls die Shell in »/etc/shells« vorhanden ist, wird sie benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:548
+msgid ""
+"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
+"quote>, use the value of the shell_fallback parameter."
+msgstr ""
+"2. Falls die Shell in der Liste »allowed_shells«, aber nicht in »/etc/"
+"shells« steht, wird der Wert des Parameters »shell_fallback« verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:553
+msgid ""
+"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
+"shells</quote>, a nologin shell is used."
+msgstr ""
+"3. Falls die Shell weder in der Liste »allowed_shells« noch in »/etc/shells« "
+"steht, wird eine Nicht-Login-Shell benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:558
+msgid "An empty string for shell is passed as-is to libc."
+msgstr ""
+"Eine leere Zeichenkette als Shell wird, so wie sie ist, an Libc übergeben."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:561
+msgid ""
+"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
+"that a restart of the SSSD is required in case a new shell is installed."
+msgstr ""
+"»/etc/shells« wird nur beim Start von SSSD gelesen. Das bedeutet, dass im "
+"Fall einer neu installierten Shell ein Neustart von SSSD nötig ist."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:565
+msgid "Default: Not set. The user shell is automatically used."
+msgstr ""
+"Voreinstellung: nicht gesetzt. Die Benutzer-Shell wird automatisch verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:570
+msgid "vetoed_shells (string)"
+msgstr "vetoed_shells (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:573
+msgid "Replace any instance of these shells with the shell_fallback"
+msgstr "ersetzt jedwede Instanz dieser Shells durch die aus »shell_fallback«."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:578
+msgid "shell_fallback (string)"
+msgstr "shell_fallback (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:581
+msgid ""
+"The default shell to use if an allowed shell is not installed on the machine."
+msgstr ""
+"Die Standard-Shell, die benutzt werden soll, falls eine erlaubte Shell nicht "
+"auf dem Rechner installiert ist."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:585
+msgid "Default: /bin/sh"
+msgstr "Voreinstellung: /bin/sh"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:590 sssd-ad.5.xml:203
+msgid "default_shell"
+msgstr "default_shell"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:593 sssd-ad.5.xml:206
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
+msgid ""
+"The default shell to use if the provider does not return one during lookup. "
+"This option supersedes any other shell options if it takes effect and can be "
+"set either in the [nss] section or per-domain."
+msgstr ""
+"Setzt die Anmeldeshell für alle Benutzer außer Kraft. Diese Option genießt "
+"Vorrecht vor allen anderen Shell-Optionen, falls sie Wirkung zeigt und kann "
+"entweder im Abschnitt [nss] oder für jede Domain gesetzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
+msgid ""
+"Default: not set (Return NULL if no shell is specified and rely on libc to "
+"substitute something sensible when necessary, usually /bin/sh)"
+msgstr ""
+"Voreinstellung: nicht gesetzt (Falls keine Shell angegeben wurde, wird NULL "
+"zurückgegeben und darauf vertraut, dass Libc es, wenn nötig, durch etwas "
+"Vernünftiges, üblicherweise /bin/sh, ersetzt.)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:606 sssd.conf.5.xml:766
+msgid "get_domains_timeout (int)"
+msgstr "get_domains_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:609 sssd.conf.5.xml:769
+msgid ""
+"Specifies time in seconds for which the list of subdomains will be "
+"considered valid."
+msgstr ""
+"gibt die Zeit in Sekunden an, während der die Liste der Subdomains als "
+"gültig erachtet wird."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:618
+msgid "memcache_timeout (int)"
+msgstr "memcache_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:621
+msgid ""
+"Specifies time in seconds for which records in the in-memory cache will be "
+"valid"
+msgstr ""
+"gibt die Zeit in Sekunden an, in denen Datensätze im speicherinternen "
+"Zwischenspeicher als gültig erachtet werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:625 sssd-ldap.5.xml:654
+msgid "Default: 300"
+msgstr "Voreinstellung: 300"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:632
+msgid "PAM configuration options"
+msgstr "PAM-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:634
+msgid ""
+"These options can be used to configure the Pluggable Authentication Module "
+"(PAM) service."
+msgstr ""
+"Diese Optionen können benutzt werden, um den Dienst »Pluggable "
+"Authentication Module« (PAM) einzurichten."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:639
+msgid "offline_credentials_expiration (integer)"
+msgstr "offline_credentials_expiration (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:642
+msgid ""
+"If the authentication provider is offline, how long should we allow cached "
+"logins (in days since the last successful online login)."
+msgstr ""
+"Wie lange sollen zwischengespeicherte Anmeldungen erlaubt werden, falls der "
+"Authentifizierungsanbieter offline ist (in Tagen seit der letzten "
+"erfolgreichen Anmeldung)?"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:647 sssd.conf.5.xml:660
+msgid "Default: 0 (No limit)"
+msgstr "Voreinstellung: 0 (unbegrenzt)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:653
+msgid "offline_failed_login_attempts (integer)"
+msgstr "offline_failed_login_attempts (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:656
+msgid ""
+"If the authentication provider is offline, how many failed login attempts "
+"are allowed."
+msgstr ""
+"Wieviele fehlgeschlagene Anmeldeversuche sind erlaubt, falls der "
+"Authentifizierungsanbieter offline ist?"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:666
+msgid "offline_failed_login_delay (integer)"
+msgstr "offline_failed_login_delay (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:669
+msgid ""
+"The time in minutes which has to pass after offline_failed_login_attempts "
+"has been reached before a new login attempt is possible."
+msgstr ""
+"die Zeit in Minuten, die nach dem Erreichen von "
+"»offline_failed_login_attempts« vergehen muss, bevor ein neuer "
+"Anmeldeversuch möglich ist."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:674
+msgid ""
+"If set to 0 the user cannot authenticate offline if "
+"offline_failed_login_attempts has been reached. Only a successful online "
+"authentication can enable offline authentication again."
+msgstr ""
+"Falls dies auf 0 gesetzt ist, kann der Benutzer sich nicht offline "
+"authentifizieren, wenn »offline_failed_login_attempts« erreicht wurde. Nur "
+"eine erfolgreiche Online-Authentifizierung kann die Offline-"
+"Authentifizierung reaktivieren."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:680 sssd.conf.5.xml:733
+msgid "Default: 5"
+msgstr "Voreinstellung: 5"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:686
+msgid "pam_verbosity (integer)"
+msgstr "pam_verbosity (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:689
+msgid ""
+"Controls what kind of messages are shown to the user during authentication. "
+"The higher the number to more messages are displayed."
+msgstr ""
+"steuert, welche Arten von Nachrichten während der Benutzerauthentifizierung "
+"angezeigt werden. Je höher die Zahl, desto mehr Nachrichten werden angezeigt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:694
+msgid "Currently sssd supports the following values:"
+msgstr "Derzeit unterstützt SSSD folgende Werte:"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:697
+msgid "<emphasis>0</emphasis>: do not show any message"
+msgstr "<emphasis>0</emphasis>: keine Nachricht anzeigen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:700
+msgid "<emphasis>1</emphasis>: show only important messages"
+msgstr "<emphasis>1</emphasis>: nur wichtige Nachrichten anzeigen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:704
+msgid "<emphasis>2</emphasis>: show informational messages"
+msgstr "<emphasis>2</emphasis>: nur informative Nachrichten anzeigen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:707
+msgid "<emphasis>3</emphasis>: show all messages and debug information"
+msgstr ""
+"<emphasis>3</emphasis>: alle Nachrichten und Debug-Informationen anzeigen"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:711 sssd.8.xml:63
+msgid "Default: 1"
+msgstr "Voreinstellung: 1"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:716
+msgid "pam_id_timeout (integer)"
+msgstr "pam_id_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:719
+msgid ""
+"For any PAM request while SSSD is online, the SSSD will attempt to "
+"immediately update the cached identity information for the user in order to "
+"ensure that authentication takes place with the latest information."
+msgstr ""
+"Für alle PAM-Anfragen, während SSSD online ist, wird SSSD versuchen, sofort "
+"die zwischengespeicherten Identitätsinformationen für den Benutzer zu "
+"aktualisieren. Dadurch wird sichergestellt, dass die Authentifizierung mit "
+"den neusten Informationen erfolgt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:725
+msgid ""
+"A complete PAM conversation may perform multiple PAM requests, such as "
+"account management and session opening. This option controls (on a per-"
+"client-application basis) how long (in seconds) we can cache the identity "
+"information to avoid excessive round-trips to the identity provider."
+msgstr ""
+"Eine vollständige PAM-Konversation kann mehrere PAM-Abfragen durchführen, "
+"wie die Kontenverwaltung und das Öffnen von Sitzungen. Diese Option steuert "
+"(auf Basis von Client-Anwendungen) wie lange (in Sekunden) die "
+"Identitätsinformationen zwischengespeichert werden können, um übermäßig "
+"viele Abfragen der Identitätsanbieter zu vermeiden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:739
+msgid "pam_pwd_expiration_warning (integer)"
+msgstr "pam_pwd_expiration_warning (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:742 sssd.conf.5.xml:1159
+msgid "Display a warning N days before the password expires."
+msgstr "zeigt N Tage vor Ablauf des Passworts eine Warnung an."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:745
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning."
+msgstr ""
+"Bitte beachten Sie, dass der Backend-Server Informationen über die "
+"Ablaufzeit des Passworts bereitstellen muss. Fehlt diese Information, kann "
+"SSSD keine Warnung anzeigen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:751 sssd.conf.5.xml:1162
+msgid ""
+"If zero is set, then this filter is not applied, i.e. if the expiration "
+"warning was received from backend server, it will automatically be displayed."
+msgstr ""
+"Falls dies auf Null gesetzt ist, wird dieser Filter nicht angewendet, d.h., "
+"falls die Ablaufwarnung vom Backend-Server empfangen wurde, wird sie "
+"automatisch angezeigt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:756
+msgid ""
+"This setting can be overridden by setting <emphasis>pwd_expiration_warning</"
+"emphasis> for a particular domain."
+msgstr ""
+"Diese Einstellung kann durch Setzen von <emphasis>pwd_expiration_warning</"
+"emphasis> für eine bestimmte Domain außer Kraft gesetzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:761 sssd.8.xml:79
+msgid "Default: 0"
+msgstr "Voreinstellung: 0"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:781
+msgid "SUDO configuration options"
+msgstr "Sudo-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure the autofs service."
+msgid "These options can be used to configure the sudo service."
+msgstr ""
+"Diese Optionen können zum Konfigurieren des Dienstes »autofs« benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:787
+msgid "sudo_timed (bool)"
+msgstr "sudo_timed (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:790
+msgid ""
+"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
+"that implement time-dependent sudoers entries."
+msgstr ""
+"bestimmt, ob die Attribute »sudoNotBefore« und »sudoNotAfter«, die "
+"zeitabhängige »sudoers«-Einträge implementieren, ausgewertet werden oder "
+"nicht."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:803
+msgid "AUTOFS configuration options"
+msgstr "AUTOFS-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:805
+msgid "These options can be used to configure the autofs service."
+msgstr ""
+"Diese Optionen können zum Konfigurieren des Dienstes »autofs« benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:809
+msgid "autofs_negative_timeout (integer)"
+msgstr "autofs_negative_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:812
+msgid ""
+"Specifies for how many seconds should the autofs responder negative cache "
+"hits (that is, queries for invalid map entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+"gibt an, wie viele Sekunden der Autofs-Responder negative Treffer "
+"zwischenspeichert (das bedeutet, Abfragen ungültiger Abbildeinträge, wie "
+"nicht existierende), bevor das Backend erneut befragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:828
+msgid "SSH configuration options"
+msgstr "SSH-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:830
+msgid "These options can be used to configure the SSH service."
+msgstr ""
+"Diese Optionen können zum Konfigurieren des SSH-Dienstes benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:834
+msgid "ssh_hash_known_hosts (bool)"
+msgstr "ssh_hash_known_hosts (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:837
+msgid ""
+"Whether or not to hash host names and addresses in the managed known_hosts "
+"file."
+msgstr ""
+"bestimmt, ob Rechnernamen und Adressen in der verwalteten Datei "
+"»known_hosts« zusammengemischt werden oder nicht."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:846
+msgid "ssh_known_hosts_timeout (integer)"
+msgstr "ssh_known_hosts_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:849
+msgid ""
+"How many seconds to keep a host in the managed known_hosts file after its "
+"host keys were requested."
+msgstr ""
+"bestimmt, wie viele Sekunden lang ein Rechner in der verwalteten Datei "
+"»known_hosts« behalten wird, bevor seine Rechnerschlüssel abgefragt werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:853
+msgid "Default: 180"
+msgstr "Voreinstellung: 180"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:861
+msgid "PAC responder configuration options"
+msgstr "PAC-Responder-Konfigurationsoptionen"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:863
+msgid ""
+"The PAC responder works together with the authorization data plugin for MIT "
+"Kerberos sssd_pac_plugin.so and a sub-domain provider. The plugin sends the "
+"PAC data during a GSSAPI authentication to the PAC responder. The sub-domain "
+"provider collects domain SID and ID ranges of the domain the client is "
+"joined to and of remote trusted domains from the local domain controller. "
+"If the PAC is decoded and evaluated some of the following operations are "
+"done:"
+msgstr ""
+"Der PAC-Responder arbeitet mit der Autorisierungsdatenerweiterung für "
+"»sssd_pac_plugin.so« von MIT Kerberos und einem Subdomain-Anbieter. Die "
+"Erweiterung sendet die PAC-Daten während einer GSSAPI-Authentifizierung an "
+"den PAC-Responder. Der Subdomain-Anbieter sammelt die SID- und ID-Bereiche "
+"der Domain, zu der der Client gehört, und die fernen vertrauenswürdigen "
+"Domains vom lokalen Domain-Controller. Falls der PAC entschlüsselt und "
+"ausgewertet wurde, werden einige der folgenden Transaktionen durchgeführt:"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:872
+#, fuzzy
+#| msgid ""
+#| "If the remote user does not exist in the cache, it is created. The uid is "
+#| "determined with the help of the SID, trusted domains will have UPGs and "
+#| "the gid will have the same value as the uid. The home directory is set "
+#| "based on the subdomain_homedir parameter. The shell will be empty by "
+#| "default, i.e. the system defaults are used, but can be overwritten with "
+#| "the default_shell parameter."
+msgid ""
+"If the remote user does not exist in the cache, it is created. The uid is "
+"calculated based on the SID, trusted domains will have UPGs and the gid will "
+"have the same value as the uid. The home directory is set based on the "
+"subdomain_homedir parameter. The shell will be empty by default, i.e. the "
+"system defaults are used, but can be overwritten with the default_shell "
+"parameter."
+msgstr ""
+"Falls der ferne Benutzer nicht im Zwischenspeicher existiert, wird er "
+"erstellt. Die UID wird mithilfe der SID bestimmt, vertrauenswürdige Domains "
+"werden UPGs und GID denselben Wert wie die UID haben. Das Home-Verzeichnis "
+"wird auf Basis des Parameters »subdomain_homedir« gesetzt. Die Shell wird "
+"standardmäßig leer sein, d.h. die Voreinstellungen des Systems werden "
+"benutzt, können jedoch mit dem Parameter »default_shell« überschrieben "
+"werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:880
+#, fuzzy
+#| msgid ""
+#| "If there are SIDs of groups from domains sssd knows about, the user will "
+#| "be added to those groups."
+msgid ""
+"If there are SIDs of groups from the domain the sssd client belongs to, the "
+"user will be added to those groups."
+msgstr ""
+"Falls es Gruppen-SIDs von Domains gibt, die SSSD kennt, wird der Benutzer zu "
+"diesen Gruppen hinzugefügt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:886
+msgid "These options can be used to configure the PAC responder."
+msgstr ""
+"Diese Optionen können zur Konfiguration des PAC-Responders verwendet werden."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:890
+msgid "allowed_uids (string)"
+msgstr "allowed_uids (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:893
+msgid ""
+"Specifies the comma-separated list of UID values or user names that are "
+"allowed to access the PAC responder. User names are resolved to UIDs at "
+"startup."
+msgstr ""
+"gibt die durch Kommata getrennte Liste von UID-Werten oder Benutzernamen an, "
+"denen der Zugriff auf den PAC-Responder erlaubt ist. Benutzernamen werden "
+"beim Starten zu UIDs aufgelöst."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:899
+msgid "Default: 0 (only the root user is allowed to access the PAC responder)"
+msgstr ""
+"Voreinstellung: 0 (Nur dem Benutzer Root ist der Zugriff auf den PAC-"
+"Responder gestattet.)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:903
+msgid ""
+"Please note that although the UID 0 is used as the default it will be "
+"overwritten with this option. If you still want to allow the root user to "
+"access the PAC responder, which would be the typical case, you have to add 0 "
+"to the list of allowed UIDs as well."
+msgstr ""
+"Bitte beachten Sie, dass, obwohl die UID 0 als Voreinstellung benutzt wird, "
+"diese Option sie überschriebt. Falls Sie weiterhin dem Benutzer Root Zugriff "
+"auf den PAC-Responder gewähren möchten, was der Normalfall ist, müssen Sie "
+"der Liste der erlaubten UIDs auch die 0 hinzufügen."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:917
+msgid "DOMAIN SECTIONS"
+msgstr "DOMAIN-ABSCHNITTE"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:924
+msgid "min_id,max_id (integer)"
+msgstr "min_id,max_id (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:927
+msgid ""
+"UID and GID limits for the domain. If a domain contains an entry that is "
+"outside these limits, it is ignored."
+msgstr ""
+"UID- und GID-Beschränkungen für die Domain. Falls eine Domain einen Eintrag "
+"enthält, der jenseits dieser Beschränkungen liegt, wird er ignoriert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:932
+msgid ""
+"For users, this affects the primary GID limit. The user will not be returned "
+"to NSS if either the UID or the primary GID is outside the range. For non-"
+"primary group memberships, those that are in range will be reported as "
+"expected."
+msgstr ""
+"Dies beeinflusst die Haupt-GID-Beschränkung für Benutzer. Der Benutzer wird "
+"nicht an NSS zurückgegeben, falls entweder die UID oder die Haupt-GID "
+"außerhalb des Bereichs liegt. Bei Mitgliedschaften in Nichthauptgruppen "
+"werden jene, die im Bereich liegen, wie erwartet gemeldet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:939
+msgid ""
+"These ID limits affect even saving entries to cache, not only returning them "
+"by name or ID."
+msgstr ""
+"Diese ID-Beschränkungen beeinflussen sogar das Speichern von Einträgen in "
+"den Zwischenspeicher und nicht nur ihre Rückgabe über Name oder ID."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:943
+msgid "Default: 1 for min_id, 0 (no limit) for max_id"
+msgstr "Voreinstellung: 1 für »min_id«, 0 (keine Beschränkung) für »max_id«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:949
+msgid "enumerate (bool)"
+msgstr "enumerate (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:952
+msgid ""
+"Determines if a domain can be enumerated. This parameter can have one of the "
+"following values:"
+msgstr ""
+"bestimmt, ob eine Domain aufgezählt werden kann. Dieser Parameter kann einen "
+"der folgenden Werte haben:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:956
+msgid "TRUE = Users and groups are enumerated"
+msgstr "TRUE = Benutzer und Gruppen werden aufgezählt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:959
+msgid "FALSE = No enumerations for this domain"
+msgstr "FALSE = keine Aufzählungen für diese Domain"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:962 sssd.conf.5.xml:1136 sssd.conf.5.xml:1238
+#: sssd.conf.5.xml:1255
+msgid "Default: FALSE"
+msgstr "Voreinstellung: FALSE"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:965
+msgid ""
+"Note: Enabling enumeration has a moderate performance impact on SSSD while "
+"enumeration is running. It may take up to several minutes after SSSD startup "
+"to fully complete enumerations. During this time, individual requests for "
+"information will go directly to LDAP, though it may be slow, due to the "
+"heavy enumeration processing. Saving a large number of entries to cache "
+"after the enumeration completes might also be CPU intensive as the "
+"memberships have to be recomputed."
+msgstr ""
+"Hinweis: Aktivieren der Aufzählung hat mäßige Auswirkungen auf die Leistung "
+"von SSSD, während die Aufzählung läuft. Das Vervollständigen der "
+"Aufzählungen kann nach dem Start von SSSD mehrere Minuten dauern. Während "
+"dieser Zeit werden individuelle Abfragen von Informationen direkt an LDAP "
+"gehen, obwohl es aufgrund des Aufzählungsprozesses möglicherweise langsam "
+"ist. Speichern einer großen Menge von Einträgen in den Zwischenspeicher, "
+"nachdem die Aufzählung vollständig ist, kann ebenfalls CPU-lastig sein, da "
+"die Mitgliedschaften neu berechnet werden müssen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:978
+msgid ""
+"While the first enumeration is running, requests for the complete user or "
+"group lists may return no results until it completes."
+msgstr ""
+"Während die erste Aufzählung läuft, geben Anfragen nach vollständigen "
+"Benutzer- oder Gruppenlisten möglicherweise bis zur Fertigstellung keine "
+"Ergebnisse zurück."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:983
+msgid ""
+"Further, enabling enumeration may increase the time necessary to detect "
+"network disconnection, as longer timeouts are required to ensure that "
+"enumeration lookups are completed successfully. For more information, refer "
+"to the man pages for the specific id_provider in use."
+msgstr ""
+"Darüber hinaus kann das Aktivieren der Aufzählung dazu führen, dass "
+"Netzwerkausfälle erst später entdeckt werden. Dies kommt daher, dass längere "
+"Zeitüberschreitungen vonnöten sind, um sicherzustellen, dass das "
+"Nachschlagen von Aufzählungen vollständig erfolgreich war. Weitere "
+"Informationen finden Sie in den Handbuchseiten für den jeweils aktuell "
+"benutzten »id_provider«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:991
+msgid ""
+"For the reasons cited above, enabling enumeration is not recommended, "
+"especially in large environments."
+msgstr ""
+"Aus den oben genannten Gründen wird das Aktivieren von Aufzählungen, "
+"insbesondere in großen Umgebungen, nicht empfohlen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1015
+msgid "entry_cache_timeout (integer)"
+msgstr "entry_cache_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1018
+msgid ""
+"How many seconds should nss_sss consider entries valid before asking the "
+"backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang »nss_sss« Einträge als gültig betrachten "
+"soll, bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1022
+msgid "Default: 5400"
+msgstr "Voreinstellung: 5400"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1028
+msgid "entry_cache_user_timeout (integer)"
+msgstr "entry_cache_user_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1031
+msgid ""
+"How many seconds should nss_sss consider user entries valid before asking "
+"the backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang »nss_sss« Benutzereinträge als gültig "
+"betrachten soll, bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1035 sssd.conf.5.xml:1048 sssd.conf.5.xml:1061
+#: sssd.conf.5.xml:1074 sssd.conf.5.xml:1087 sssd.conf.5.xml:1101
+msgid "Default: entry_cache_timeout"
+msgstr "Voreinstellung: entry_cache_timeout"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1041
+msgid "entry_cache_group_timeout (integer)"
+msgstr "entry_cache_group_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1044
+msgid ""
+"How many seconds should nss_sss consider group entries valid before asking "
+"the backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang »nss_sss« Gruppeneinträge als gültig "
+"betrachten soll, bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1054
+msgid "entry_cache_netgroup_timeout (integer)"
+msgstr "entry_cache_netgroup_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1057
+msgid ""
+"How many seconds should nss_sss consider netgroup entries valid before "
+"asking the backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang »nss_sss« Netzgruppeneinträge als gültig "
+"betrachten soll, bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1067
+msgid "entry_cache_service_timeout (integer)"
+msgstr "entry_cache_service_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1070
+msgid ""
+"How many seconds should nss_sss consider service entries valid before asking "
+"the backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang »nss_sss« Diensteinträge als gültig "
+"betrachten soll, bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1080
+msgid "entry_cache_sudo_timeout (integer)"
+msgstr "entry_cache_sudo_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1083
+msgid ""
+"How many seconds should sudo consider rules valid before asking the backend "
+"again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang Sudo Regeln als gültig betrachten soll, "
+"bevor das Backend erneut abgefragt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1093
+msgid "entry_cache_autofs_timeout (integer)"
+msgstr "entry_cache_autofs_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1096
+msgid ""
+"How many seconds should the autofs service consider automounter maps valid "
+"before asking the backend again"
+msgstr ""
+"bestimmt, wie viele Sekunden lang der Dienst »autofs« Abbilder des "
+"Automounters als gültig betrachten soll, bevor das Backend erneut abgefragt "
+"wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1107
+msgid "refresh_expired_interval (integer)"
+msgstr "refresh_expired_interval (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1110
+#, fuzzy
+#| msgid ""
+#| "Specifies how many seconds SSSD has to wait before refreshing its cache "
+#| "of enumerated records."
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing expired "
+"records. Currently only refreshing expired netgroups is supported."
+msgstr ""
+"gibt an, wie viele Sekunden lang SSSD warten soll, bevor es seinen "
+"Zwischenspeicher aufgezählter Datensätze aktualisiert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1115
+msgid "You can consider setting this value to 3/4 * entry_cache_timeout."
+msgstr ""
+"Sie können in Betracht ziehen, diesen Wert auf 3/4 * entry_cache_timeout zu "
+"setzen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1119
+msgid "Default: 0 (disabled)"
+msgstr "Voreinstellung: 0 (deaktiviert)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1125
+msgid "cache_credentials (bool)"
+msgstr "cache_credentials (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1128
+msgid "Determines if user credentials are also cached in the local LDB cache"
+msgstr ""
+"bestimmt, ob auch Benutzerberechtigungen im lokalen LDB-Zwischenspeicher "
+"zwischengespeichert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1132
+msgid "User credentials are stored in a SHA512 hash, not in plaintext"
+msgstr ""
+"Benutzerberechtigungen werden in einem SHA512-Hash, nicht im Klartext "
+"gespeichert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1141
+msgid "account_cache_expiration (integer)"
+msgstr "account_cache_expiration (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1144
+msgid ""
+"Number of days entries are left in cache after last successful login before "
+"being removed during a cleanup of the cache. 0 means keep forever. The "
+"value of this parameter must be greater than or equal to "
+"offline_credentials_expiration."
+msgstr ""
+"Anzahl der Tage, während der Einträge nach einer erfolgreichen Anmeldung im "
+"Zwischenspeicher bleiben, bevor sie im Laufe der Zwischenspeicherbereinigung "
+"entfernt werden. 0 bedeutet, für immer aufbewahren. Der Wert dieses "
+"Parameters muss größer oder gleich »offline_credentials_expiration« sein."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1151
+msgid "Default: 0 (unlimited)"
+msgstr "Voreinstellung: 0 (unbegrenzt)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1156
+msgid "pwd_expiration_warning (integer)"
+msgstr "pwd_expiration_warning (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1167
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning. Also an auth provider has to be configured for the "
+"backend."
+msgstr ""
+"Bitte beachten Sie, dass der Backend-Server Informationen über die "
+"Ablaufzeit des Passworts bereitstellen muss. Fehlt diese Information, kann "
+"SSSD keine Warnung anzeigen. Außerdem muss für das Backend ein "
+"Authentifizierungsanbieter konfiguriert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1174
+msgid "Default: 7 (Kerberos), 0 (LDAP)"
+msgstr "Voreinstellung: 7 (Kerberos), 0 (LDAP)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1180
+msgid "id_provider (string)"
+msgstr "id_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1183
+msgid ""
+"The identification provider used for the domain. Supported ID providers are:"
+msgstr ""
+"der für die Domain benutzte Authentifizierungsanbieter. Folgende ID-Anbieter "
+"werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1187
+#, fuzzy
+#| msgid "<quote>proxy</quote>: Support a legacy NSS provider"
+msgid "proxy: Support a legacy NSS provider"
+msgstr "»proxy«: unterstützt einen veralteten NSS-Anbieter."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1190
+msgid "<quote>local</quote>: SSSD internal provider for local users"
+msgstr "»local«: SSSDs interner Anbieter für lokale Benutzer"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1194
+msgid ""
+"<quote>ldap</quote>: LDAP provider. See <citerefentry> <refentrytitle>sssd-"
+"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more "
+"information on configuring LDAP."
+msgstr ""
+"»ldap«: LDAP-Anbieter: Weitere Informationen über die Konfiguration von LDAP "
+"finden Sie unter <citerefentry> <refentrytitle>sssd-ldap</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1202 sssd.conf.5.xml:1281 sssd.conf.5.xml:1332
+#: sssd.conf.5.xml:1385
+msgid ""
+"<quote>ipa</quote>: FreeIPA and Red Hat Enterprise Identity Management "
+"provider. See <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
+"FreeIPA."
+msgstr ""
+"»ipa«: Anbieter von FreeIPA und Red Hat Enterprise Identity Management. "
+"Weitere Informationen über die Konfiguration von FreeIPA finden Sie unter "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1290 sssd.conf.5.xml:1341
+#: sssd.conf.5.xml:1394
+msgid ""
+"<quote>ad</quote>: Active Directory provider. See <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Active Directory."
+msgstr ""
+"»ad«: Active-Directory-Anbieter: Weitere Informationen über die "
+"Konfiguration von Active Directory finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1222
+msgid "use_fully_qualified_names (bool)"
+msgstr "use_fully_qualified_names (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1225
+msgid ""
+"Use the full name and domain (as formatted by the domain's full_name_format) "
+"as the user's login name reported to NSS."
+msgstr ""
+"benutzt den vollständigen Namen und die Domain (wie sie durch das "
+"»full_name_format« der Domain formatiert wurde) als Anmeldenamen des "
+"Benutzers, der an NSS gemeldet wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1230
+msgid ""
+"If set to TRUE, all requests to this domain must use fully qualified names. "
+"For example, if used in LOCAL domain that contains a \"test\" user, "
+"<command>getent passwd test</command> wouldn't find the user while "
+"<command>getent passwd test@LOCAL</command> would."
+msgstr ""
+"Ist dies auf TRUE gesetzt, müssen Anfragen an diese Domain voll "
+"qualifizierte Namen benutzen. Falls zum Beispiel <command>getent passwd "
+"test</command> in der Domain LOCAL benutzt wird, die einen Benutzer »test« "
+"enthält, würde der Benutzer nicht gefunden, <command>getent passwd "
+"test@LOCAL</command> würde ihn hingegen finden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1243
+msgid "ignore_group_members (bool)"
+msgstr "ignore_group_members (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1246
+msgid "Do not return group members for group lookups."
+msgstr "gibt beim Nachschlagen der Gruppe nicht die Gruppenmitglieder zurück."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1249
+msgid ""
+"If set to TRUE, the group membership attribute is not requested from the "
+"ldap server, and group members are not returned when processing group lookup "
+"calls."
+msgstr ""
+"Ist dies auf TRUE gesetzt, wird das Gruppenzugehörigkeitsattribut nicht vom "
+"LDAP-Server abgefragt und wenn die Aufrufe zum Nachschlagen der Gruppen "
+"verarbeitet werden, werden die Gruppenmitglieder nicht zurückgegeben."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1260
+msgid "auth_provider (string)"
+msgstr "auth_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1263
+msgid ""
+"The authentication provider used for the domain. Supported auth providers "
+"are:"
+msgstr ""
+"der für diese Domain benutzte Authentifizierungsanbieter. Folgende "
+"Authentifizierungsanbieter werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1267 sssd.conf.5.xml:1325
+msgid ""
+"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+"»ldap« für native LDAP-Authentifizierung. Weitere Informationen über die "
+"Konfiguration von LDAP finden Sie unter <citerefentry> <refentrytitle>sssd-"
+"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1274
+msgid ""
+"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+"»krb5« für Kerberos-Authentifizierung. Weitere Informationen über die "
+"Konfiguration von Kerberos finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1298
+msgid ""
+"<quote>proxy</quote> for relaying authentication to some other PAM target."
+msgstr ""
+"»proxy« zur Weitergabe der Authentifizierung an irgendein anderes PAM-Ziel"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1301
+msgid "<quote>none</quote> disables authentication explicitly."
+msgstr "»none« deaktiviert explizit die Authentifizierung."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1304
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"authentication requests."
+msgstr ""
+"Voreinstellung: »id_provider« wird, falls es gesetzt ist, benutzt und kann "
+"mit Authentifizierungsanfragen umgehen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1310
+msgid "access_provider (string)"
+msgstr "access_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1313
+msgid ""
+"The access control provider used for the domain. There are two built-in "
+"access providers (in addition to any included in installed backends) "
+"Internal special providers are:"
+msgstr ""
+"der für diese Domain benutzte Zugriffssteuerungsanbieter. Es gibt zwei "
+"integrierte Zugriffsanbieter (zusätzlich zu denen, die in den installierten "
+"Backends enthalten sind). Interne Spezialanbieter sind:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1319
+msgid ""
+"<quote>permit</quote> always allow access. It's the only permitted access "
+"provider for a local domain."
+msgstr ""
+"»permit« gibt immer Zugriff. Es ist der einzige erlaubte Zugriffsanbieter "
+"für eine lokale Domain."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1322
+msgid "<quote>deny</quote> always deny access."
+msgstr "»deny« verweigert dem Zugriff immer."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1349
+msgid ""
+"<quote>simple</quote> access control based on access or deny lists. See "
+"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry> for more information on configuring the simple "
+"access module."
+msgstr ""
+"»simple«: Zugriffssteuerung basierend auf Zugriffs- oder "
+"Verweigerungslisten. Weitere Informationen über die Konfiguration des "
+"einfachen Zugriffsmoduls finden sie unter <citerefentry> <refentrytitle>sssd-"
+"simple</refentrytitle> <manvolnum>5</manvolnum></citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1356
+msgid "Default: <quote>permit</quote>"
+msgstr "Voreinstellung: »permit«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1361
+msgid "chpass_provider (string)"
+msgstr "chpass_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1364
+msgid ""
+"The provider which should handle change password operations for the domain. "
+"Supported change password providers are:"
+msgstr ""
+"der Anbieter, der Passwortänderungsaktionen für die Domain handhaben soll. "
+"Folgende Anbieter von Passwortänderungen werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1369
+msgid ""
+"<quote>ldap</quote> to change a password stored in a LDAP server. See "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring LDAP."
+msgstr ""
+"»ldap« zum Ändern eines auf einem LDAP-Server gespeicherten Passworts. "
+"Weitere Informationen über die Konfiguration von LDAP finden Sie unter "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1377
+msgid ""
+"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+"»krb5« zum Ändern des Kerberos-Passworts. Weitere Informationen über die "
+"Konfiguration von Kerberos finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1402
+msgid ""
+"<quote>proxy</quote> for relaying password changes to some other PAM target."
+msgstr ""
+"»proxy« zur Weitergabe der Passwortänderung an irgendein anderes PAM-Ziel"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1406
+msgid "<quote>none</quote> disallows password changes explicitly."
+msgstr "»none« verbietet explizit Passwortänderungen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1409
+msgid ""
+"Default: <quote>auth_provider</quote> is used if it is set and can handle "
+"change password requests."
+msgstr ""
+"Voreinstellung: »auth_provider« wird, falls es gesetzt ist, benutzt und "
+"kann mit Passwortänderungsanfragen umgehen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1416
+msgid "sudo_provider (string)"
+msgstr "sudo_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1419
+msgid "The SUDO provider used for the domain. Supported SUDO providers are:"
+msgstr ""
+"der für diese Domain benutzte Sudo-Anbieter. Folgende Sudo-Anbieter werden "
+"unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1423
+msgid ""
+"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+"»ldap« für die in LDAP gespeicherten Regeln. Weitere Informationen über die "
+"Konfiguration von LDAP finden Sie unter <citerefentry> <refentrytitle>sssd-"
+"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1430
+msgid "<quote>none</quote> disables SUDO explicitly."
+msgstr "»none« deaktiviert explizit Sudo."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1433 sssd.conf.5.xml:1487 sssd.conf.5.xml:1519
+#: sssd.conf.5.xml:1544
+msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
+msgstr ""
+"Voreinstellung: Falls gesetzt, wird der Wert von »id_provider« benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1439
+msgid "selinux_provider (string)"
+msgstr "selinux_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1442
+msgid ""
+"The provider which should handle loading of selinux settings. Note that this "
+"provider will be called right after access provider ends. Supported selinux "
+"providers are:"
+msgstr ""
+"der Anbieter, der das Laden der SELinux-Einstellungen handhaben soll. "
+"Beachten Sie, dass dieser Anbieter direkt aufgerufen wird, nachdem sich der "
+"Zugriffsanbieter beendet hat. Folgende SELinux-Anbieter werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1448
+msgid ""
+"<quote>ipa</quote> to load selinux settings from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+"»ipa«, um SELinux-Einstellungen von einem IPA-Server zu laden. Weitere "
+"Informationen über die Konfiguration von FreeIPA finden Sie unter "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1456
+msgid "<quote>none</quote> disallows fetching selinux settings explicitly."
+msgstr "»none« verbietet explizit das Abholen von SELinux-Einstellungen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1459
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"selinux loading requests."
+msgstr ""
+"Voreinstellung: Falls gesetzt, wird der Wert von »id_provider« benutzt. Er "
+"kann SELinux-Ladeanfragen handhaben."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1465
+msgid "subdomains_provider (string)"
+msgstr "subdomains_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1468
+msgid ""
+"The provider which should handle fetching of subdomains. This value should "
+"be always the same as id_provider. Supported subdomain providers are:"
+msgstr ""
+"der Anbieter, der das Abholen von Subdomains handhaben soll. Dieser Wert "
+"sollte immer derselbe sein wie »id_provider«. Folgende Subdomain-Anbieter "
+"werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1474
+msgid ""
+"<quote>ipa</quote> to load a list of subdomains from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+"»ipa«, um eine Liste mit Subdomains von einem IPA-Server zu laden. Weitere "
+"Informationen über die Konfiguration von IPA finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1483
+msgid "<quote>none</quote> disallows fetching subdomains explicitly."
+msgstr "»none« deaktiviert explizit das Abholen von Subdomains."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1494
+msgid "autofs_provider (string)"
+msgstr "autofs_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1497
+msgid ""
+"The autofs provider used for the domain. Supported autofs providers are:"
+msgstr ""
+"der für diese Domain benutzte Anbieter von »autofs«. Folgende Anbieter von "
+"»autofs« werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1501
+msgid ""
+"<quote>ldap</quote> to load maps stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+"»ldap«, um in LDAP gespeicherte Abbilder zu laden. Weitere Informationen "
+"über die Konfiguration von LDAP finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1508
+msgid ""
+"<quote>ipa</quote> to load maps stored in an IPA server. See <citerefentry> "
+"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring IPA."
+msgstr ""
+"»ipa«, um auf einem IPA-Server gespeicherte Abbilder zu laden. Weitere "
+"Informationen über die Konfiguration von IPA finden Sie unter <citerefentry> "
+"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1516
+msgid "<quote>none</quote> disables autofs explicitly."
+msgstr "»none« deaktiviert explizit »autofs«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1526
+msgid "hostid_provider (string)"
+msgstr "hostid_provider (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1529
+msgid ""
+"The provider used for retrieving host identity information. Supported "
+"hostid providers are:"
+msgstr ""
+"der Anbieter, der zum Abfragen der Rechneridentitätsinformationen benutzt "
+"wird. Folgende Anbieter von »hostid« werden unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1533
+msgid ""
+"<quote>ipa</quote> to load host identity stored in an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+"»ipa«, um die auf einem IPA-Server gespeicherte Rechneridentität zu laden. "
+"Weitere Informationen über die Konfiguration von IPA finden Sie unter "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1541
+msgid "<quote>none</quote> disables hostid explicitly."
+msgstr "»none« deaktiviert explizit »hostid«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1554
+#, fuzzy
+#| msgid ""
+#| "Default regular expression that describes how to parse the string "
+#| "containing user name and domain into these components."
+msgid ""
+"Regular expression for this domain that describes how to parse the string "
+"containing user name and domain into these components."
+msgstr ""
+"voreingestellter regulärer Ausdruck, der beschreibt, in welche Bestandteile "
+"die Zeichenkette mit Benutzernamen und Domain bei der Auswertung zerlegt "
+"werden sollen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1559
+msgid ""
+"Default for the AD and IPA provider: <quote>(((?P&lt;domain&gt;[^\\\\]+)\\"
+"\\(?P&lt;name&gt;.+$))|((?P&lt;name&gt;[^@]+)@(?P&lt;domain&gt;.+$))|(^(?"
+"P&lt;name&gt;[^@\\\\]+)$))</quote> which allows three different styles for "
+"user names:"
+msgstr ""
+"Voreinstellung für den AD- oder IPA-Anbieter: »(((?P&lt;Domain&gt;[^\\\\]+)\\"
+"\\(?P&lt;Name&gt;.+$))|((?P&lt;Name&gt;[^@]+)@(?P&lt;Domain&gt;.+$))|(^(?"
+"P&lt;Name&gt;[^@\\\\]+)$))« "
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1564
+msgid "username"
+msgstr "Benutzername"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1567
+msgid "username@domain.name"
+msgstr "Benutzername@Domain.Name"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1570
+msgid "domain\\username"
+msgstr "Domain\\Benutzername"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1573
+msgid ""
+"While the first two correspond to the general default the third one is "
+"introduced to allow easy integration of users from Windows domains."
+msgstr ""
+"Während die ersten beiden der allgemeinen Voreinstellung entsprechen, wurde "
+"die dritte eingeführt, um eine einfache Eingliederung von Benutzern aus "
+"Windows-Domains zu ermöglichen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1578
+msgid ""
+"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
+"which translates to \"the name is everything up to the <quote>@</quote> "
+"sign, the domain everything after that\""
+msgstr ""
+"Voreinstellung: »(?P&lt;Name&gt;[^@]+)@?(?P&lt;Domain&gt;[^@]*$)«, was "
+"bedeutet »der Name ist alles bis zum »@«-Zeichen, die Domain alles danach«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1584
+msgid ""
+"PLEASE NOTE: the support for non-unique named subpatterns is not available "
+"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
+"version 7 or higher can support non-unique named subpatterns."
+msgstr ""
+"BITTE BEACHTEN SIE: Die Unterstützung für nicht eindeutig benannte "
+"Musterteile ist nicht auf allen Plattformen (z.B. RHEL5 und SLES10) "
+"vorhanden. Nur Plattformen mit Libpcre Version 7 oder höher können nicht "
+"eindeutig benannte Musterteile unterstützen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1591
+msgid ""
+"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
+"P&lt;name&gt;) to label subpatterns."
+msgstr ""
+"BITTE BEACHTEN SIE AUCH: Ältere Versionen von Libpcre unterstützen für "
+"Beschriftungsmusterteile nur die Python-Syntax (?P&lt;Name&gt;)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1601
+#, fuzzy
+#| msgid ""
+#| "A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+#| "manvolnum> </citerefentry>-compatible format that describes how to "
+#| "compose a fully qualified name from user name and domain name components."
+msgid ""
+"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+"manvolnum> </citerefentry>-compatible format that describes how to translate "
+"a (name, domain) tuple for this domain into a fully qualified name."
+msgstr ""
+"ein mit <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+"manvolnum> </citerefentry> kompatibles Format, das beschreibt, wie ein voll "
+"qualifizierter Name aus den Bestandteilen Benutzername und Domain-Name "
+"zusammengestellt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1609
+msgid "Default: <quote>%1$s@%2$s</quote>."
+msgstr "Voreinstellung: »%1$s@%2$s«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1615
+msgid "lookup_family_order (string)"
+msgstr "lookup_family_order (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1618
+msgid ""
+"Provides the ability to select preferred address family to use when "
+"performing DNS lookups."
+msgstr ""
+"ermöglicht es, die bei DNS-Abfragen zu bevorzugende Adressfamilie zu wählen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1622
+msgid "Supported values:"
+msgstr "unterstützte Werte:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1625
+msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
+msgstr ""
+"ipv4_first: versucht die IPv4- und, falls dies fehlschlägt, die IPv6-Adresse "
+"nachzuschlagen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1628
+msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
+msgstr "ipv4_only: versucht, nur Rechnernamen zu IPv4-Adressen aufzulösen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1631
+msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
+msgstr ""
+"ipv6_first: versucht die IPv6- und, falls dies fehlschlägt, die IPv4-Adresse "
+"nachzuschlagen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1634
+msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
+msgstr "ipv6_only: versucht, nur Rechnernamen zu IPv6-Adressen aufzulösen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1637
+msgid "Default: ipv4_first"
+msgstr "Voreinstellung: ipv4_first"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1643
+msgid "dns_resolver_timeout (integer)"
+msgstr "dns_resolver_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1646
+msgid ""
+"Defines the amount of time (in seconds) to wait for a reply from the DNS "
+"resolver before assuming that it is unreachable. If this timeout is reached, "
+"the domain will continue to operate in offline mode."
+msgstr ""
+"definiert die Zeit (in Sekunden), die auf eine Antwort vom DNS-Resolver "
+"gewartet werden soll, bevor davon ausgegangen wird, dass er nicht erreichbar "
+"ist. Falls diese Zeitüberschreitung auftritt, wird die Domain weiterhin im "
+"Offline-Modus arbeiten."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1652 sssd-ldap.5.xml:1083 sssd-ldap.5.xml:1125
+#: sssd-ldap.5.xml:1140
+msgid "Default: 6"
+msgstr "Voreinstellung: 6"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1658
+msgid "dns_discovery_domain (string)"
+msgstr "dns_discovery_domain (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1661
+msgid ""
+"If service discovery is used in the back end, specifies the domain part of "
+"the service discovery DNS query."
+msgstr ""
+"Falls die Dienstsuche im Backend benutzt wird, gibt dies den Domain-Teil der "
+"DNS-Dienstabfrage an."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1665
+msgid "Default: Use the domain part of machine's hostname"
+msgstr "Voreinstellung: Der Domain-Teil des Rechnernamens wird benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1671
+msgid "override_gid (integer)"
+msgstr "override_gid (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1674
+msgid "Override the primary GID value with the one specified."
+msgstr "überschreibt die Haupt-GID mit der angegebenen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1680
+msgid "case_sensitive (boolean)"
+msgstr "case_sensitive (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1683
+msgid ""
+"Treat user and group names as case sensitive. At the moment, this option is "
+"not supported in the local provider."
+msgstr ""
+"berücksichtigt bei Benutzer- und Gruppennamen die Groß- und Kleinschreibung. "
+"Im Moment wird diese Option nicht vom lokalen Anbieter unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1688
+msgid "Default: True"
+msgstr "Voreinstellung: True"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1694
+msgid "proxy_fast_alias (boolean)"
+msgstr "proxy_fast_alias (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1697
+msgid ""
+"When a user or group is looked up by name in the proxy provider, a second "
+"lookup by ID is performed to \"canonicalize\" the name in case the requested "
+"name was an alias. Setting this option to true would cause the SSSD to "
+"perform the ID lookup from cache for performance reasons."
+msgstr ""
+"Wenn ein Benutzer oder eine Gruppe anhand des Namen im Anbieter »proxy« "
+"nachgeschlagen wird, wird zusätzlich auch die ID aufgelöst. So wird der Name "
+"für den Fall, dass er ein Alias ist, in eine »kanonische« Form gebracht. "
+"Diese Option auf »True« zu setzen würde SSSD aus Leistungsgründen dazu "
+"veranlassen, die ID im Zwischenspeicher nachzuschlagen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1711
+msgid "subdomain_homedir (string)"
+msgstr "subdomain_homedir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1714
+#, fuzzy
+#| msgid ""
+#| "Use this homedir as default value for all subdomains within this domain "
+#| "in IPA AD trust. See <emphasis>override_homedir</emphasis> for info "
+#| "about possible values. In addition to those, the expansion below can only "
+#| "be used with <emphasis>subdomain_homedir</emphasis>. <placeholder type="
+#| "\"variablelist\" id=\"0\"/>"
+msgid ""
+"Use this homedir as default value for all subdomains within this domain. See "
+"<emphasis>override_homedir</emphasis> for info about possible values."
+msgstr ""
+"Dieses Home-Verzeichnis wird als Vorgabewert für alle Subdomains innerhalb "
+"dieser Domain im IPA-AD-Trust verwendet. In <emphasis>override_homedir</"
+"emphasis> finden Sie Informationen zu möglichen Werten. Außerdem kann die "
+"nachfolgende Expansion nur mit <emphasis>subdomain_homedir</emphasis> "
+"verwendet werden. <placeholder type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1719
+msgid ""
+"The value can be overridden by <emphasis>override_homedir</emphasis> option."
+msgstr ""
+"Der Wert kann mit der Option <emphasis>override_homedir</emphasis> "
+"überschrieben werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1723
+msgid "Default: <filename>/home/%d/%u</filename>"
+msgstr "Voreinstellung: <filename>/home/%d/%u</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:919
+msgid ""
+"These configuration options can be present in a domain configuration "
+"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
+"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Diese Konfigurationsoptionen können in einem Abschnitt einer Domain-"
+"Konfiguration vorhanden sein, das heißt, in einem Abschnitt namens "
+"<quote>[domain/<replaceable>NAME</replaceable>]</quote> <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1735
+msgid "proxy_pam_target (string)"
+msgstr "proxy_pam_target (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1738
+msgid "The proxy target PAM proxies to."
+msgstr "das Proxy-Ziel, an das PAM weiterleitet"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1741
+msgid ""
+"Default: not set by default, you have to take an existing pam configuration "
+"or create a new one and add the service name here."
+msgstr ""
+"Voreinstellung: standardmäßig nicht gesetzt, Sie müssen eine bestehende PAM-"
+"Konfiguration nehmen oder eine neue erstellen und hier den Dienstnamen "
+"hinzufügen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1749
+msgid "proxy_lib_name (string)"
+msgstr "proxy_lib_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1752
+msgid ""
+"The name of the NSS library to use in proxy domains. The NSS functions "
+"searched for in the library are in the form of _nss_$(libName)_$(function), "
+"for example _nss_files_getpwent."
+msgstr ""
+"der Name der NSS-Bibliothek, der für die Proxy-Domains benutzt werden soll. "
+"Die in der NSS-Funktionen gesuchten Funktionen haben die Form »_nss_"
+"$(libName)_$(function)«, zum Beispiel »_nss_files_getpwent«."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1731
+msgid ""
+"Options valid for proxy domains. <placeholder type=\"variablelist\" id="
+"\"0\"/>"
+msgstr ""
+"gültige Optionen für Proxy-Domains. <placeholder type=\"variablelist\" id="
+"\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:1764
+msgid "The local domain section"
+msgstr "Der Abschnitt lokale Domain"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:1766
+msgid ""
+"This section contains settings for domain that stores users and groups in "
+"SSSD native database, that is, a domain that uses "
+"<replaceable>id_provider=local</replaceable>."
+msgstr ""
+"Dieser Abschnitt enthält Einstellungen für Domains, die Benutzer und Gruppen "
+"ein einer nativen SSSD-Datenbank speichern, das heißt eine Domain, die "
+"<replaceable>ID_Anbieter=lokal</replaceable> benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1773
+msgid "default_shell (string)"
+msgstr "default_shell (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1776
+msgid "The default shell for users created with SSSD userspace tools."
+msgstr ""
+"die Standard-Shell für Anwender, die mit den SSSD-Werkzeugen für den "
+"Benutzerbereich erstellt wurde."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1780
+msgid "Default: <filename>/bin/bash</filename>"
+msgstr "Voreinstellung: <filename>/bin/bash</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1785
+msgid "base_directory (string)"
+msgstr "base_directory (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1788
+msgid ""
+"The tools append the login name to <replaceable>base_directory</replaceable> "
+"and use that as the home directory."
+msgstr ""
+"Die Werkzeuge hängen den Anmeldenamen an das <replaceable>Basisverzeichnis</"
+"replaceable> und benutzen dies als Home-Verzeichnis."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1793
+msgid "Default: <filename>/home</filename>"
+msgstr "Voreinstellung: <filename>/home</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1798
+msgid "create_homedir (bool)"
+msgstr "create_homedir (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1801
+msgid ""
+"Indicate if a home directory should be created by default for new users. "
+"Can be overridden on command line."
+msgstr ""
+"gibt an, ob standardmäßig ein Home-Verzeichnis für neue Benutzer erstellt "
+"werden soll; kann auf der Befehlszeile überschrieben werden"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1805 sssd.conf.5.xml:1817
+msgid "Default: TRUE"
+msgstr "Voreinstellung: TRUE"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1810
+msgid "remove_homedir (bool)"
+msgstr "remove_homedir (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1813
+msgid ""
+"Indicate if a home directory should be removed by default for deleted "
+"users. Can be overridden on command line."
+msgstr ""
+"gibt an, ob das Home-Verzeichnis für gelöschte Benutzer standardmäßig "
+"entfernt werden soll; kann auf der Befehlszeile überschrieben werden"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1822
+msgid "homedir_umask (integer)"
+msgstr "homedir_umask (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1825
+msgid ""
+"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
+"on a newly created home directory."
+msgstr ""
+"wird von <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> benutzt, um die "
+"Standardzugriffsrechte für ein neu erstelltes Home-Verzeichnis anzugeben."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1833
+msgid "Default: 077"
+msgstr "Voreinstellung: 077"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1838
+msgid "skel_dir (string)"
+msgstr "skel_dir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1841
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>"
+msgstr ""
+"die Verzeichnisvorlage, die Dateien und Verzeichnisse enthält, die in das "
+"Home-Verzeichnis des Benutzers kopiert werden, wenn das Home-Verzeichnis "
+"durch <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> erstellt wird"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1851
+msgid "Default: <filename>/etc/skel</filename>"
+msgstr "Voreinstellung: <filename>/etc/skel</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1856
+msgid "mail_dir (string)"
+msgstr "mail_dir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1859
+msgid ""
+"The mail spool directory. This is needed to manipulate the mailbox when its "
+"corresponding user account is modified or deleted. If not specified, a "
+"default value is used."
+msgstr ""
+"das Spool-Verzeichnis für E-Mails. Dies wird benötigt, um die Mailbox zu "
+"manipulieren, wenn das zugehörige Benutzerkonto verändert oder gelöscht "
+"wurde. Ist dies nicht angegeben wird ein Standardwert verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1866
+msgid "Default: <filename>/var/mail</filename>"
+msgstr "Voreinstellung: <filename>/var/mail</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1871
+msgid "userdel_cmd (string)"
+msgstr "userdel_cmd (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1874
+msgid ""
+"The command that is run after a user is removed. The command us passed the "
+"username of the user being removed as the first and only parameter. The "
+"return code of the command is not taken into account."
+msgstr ""
+"der Befehl, der nach dem Entfernen eines Benutzers ausgeführt wird. Dem "
+"Befehl wird als erster und einziger Parameter der Benutzername des Anwenders "
+"übergeben, der entfernt wird. Der Rückgabewert des Befehls wird nicht "
+"berücksichtigt."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1880
+msgid "Default: None, no command is run"
+msgstr "Voreinstellung: keine, es wird kein Befehl ausgeführt"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:1890 sssd-ldap.5.xml:2329 sssd-simple.5.xml:131
+#: sssd-ipa.5.xml:612 sssd-ad.5.xml:229 sssd-krb5.5.xml:441
+msgid "EXAMPLE"
+msgstr "BEISPIEL"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:1896
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"domains = LDAP\n"
+"services = nss, pam\n"
+"config_file_version = 2\n"
+"\n"
+"[nss]\n"
+"filter_groups = root\n"
+"filter_users = root\n"
+"\n"
+"[pam]\n"
+"\n"
+"[domain/LDAP]\n"
+"id_provider = ldap\n"
+"ldap_uri = ldap://ldap.example.com\n"
+"ldap_search_base = dc=example,dc=com\n"
+"\n"
+"auth_provider = krb5\n"
+"krb5_server = kerberos.example.com\n"
+"krb5_realm = EXAMPLE.COM\n"
+"cache_credentials = true\n"
+"\n"
+"min_id = 10000\n"
+"max_id = 20000\n"
+"enumerate = False\n"
+msgstr ""
+"[sssd]\n"
+"domains = LDAP\n"
+"services = nss, pam\n"
+"config_file_version = 2\n"
+"\n"
+"[nss]\n"
+"filter_groups = root\n"
+"filter_users = root\n"
+"\n"
+"[pam]\n"
+"\n"
+"[domain/LDAP]\n"
+"id_provider = ldap\n"
+"ldap_uri = ldap://ldap.example.com\n"
+"ldap_search_base = dc=example,dc=com\n"
+"\n"
+"auth_provider = krb5\n"
+"krb5_server = kerberos.example.com\n"
+"krb5_realm = EXAMPLE.COM\n"
+"cache_credentials = true\n"
+"\n"
+"min_id = 10000\n"
+"max_id = 20000\n"
+"enumerate = False\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1892
+msgid ""
+"The following example shows a typical SSSD config. It does not describe "
+"configuration of the domains themselves - refer to documentation on "
+"configuring domains for more details. <placeholder type=\"programlisting\" "
+"id=\"0\"/>"
+msgstr ""
+"Das folgende Beispiel zeigt eine typische SSSD-Konfiguration. Sie beschreibt "
+"nicht die Konfiguration der Domains selbst – weitere Einzelheiten finden Sie "
+"in der Dokumentation zum Konfigurieren von Domains. <placeholder type="
+"\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
+msgid "sssd-ldap"
+msgstr "sssd-ldap"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:23
+msgid ""
+"This manual page describes the configuration of LDAP domains for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Refer to the <quote>FILE FORMAT</quote> section of the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for detailed syntax information."
+msgstr ""
+"Diese Handbuchseite beschreibt die Konfiguration von LDAP-Domains für "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Detaillierte Syntax-Informationen finden Sie im Abschnitt "
+"»DATEIFORMAT« der Handbuchseite <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:35
+msgid "You can configure SSSD to use more than one LDAP domain."
+msgstr ""
+"Sie können SSSD so konfigurieren, dass es mehr als eine LDAP-Domain benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:38
+msgid ""
+"LDAP back end supports id, auth, access and chpass providers. If you want to "
+"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
+"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
+"over an unencrypted channel. If the LDAP server is used only as an identity "
+"provider, an encrypted channel is not needed. Please refer to "
+"<quote>ldap_access_filter</quote> config option for more information about "
+"using LDAP as an access provider."
+msgstr ""
+"Das LDAP-Backend unterstützt ID-, Authentifizierungs-, Zugriffs- und Chpass-"
+"Anbieter. Falls Sie sich bei einem LDAP-Server authentifizieren möchten, "
+"wird entweder TLS/SSL oder LDAPS benötigt. <command>sssd</command> "
+"unterstützt <emphasis>keine</emphasis> Authentifizierung über einen "
+"unverschlüsselten Kanal. Falls der LDAP-Server nur als Identitätsanbieter "
+"benutzt wird, wird kein verschlüsselter Kanal benötigt. Weitere "
+"Informationen über die Verwendung von LDAP als Zugriffsanbieter finden Sie "
+"unter »ldap_access_filter«."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:70 sssd-ad.5.xml:75
+#: sssd-krb5.5.xml:63
+msgid "CONFIGURATION OPTIONS"
+msgstr "KONFIGURATIONSOPTIONEN"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:60
+msgid "ldap_uri, ldap_backup_uri (string)"
+msgstr "ldap_uri, ldap_backup_uri (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:63
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference. Refer to the <quote>FAILOVER</"
+"quote> section for more information on failover and server redundancy. If "
+"neither option is specified, service discovery is enabled. For more "
+"information, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+"gibt eine durch Kommata getrennte Liste der LDAP-Server-URIs in der "
+"Reihenfolge an, in der sich SSSD mit ihnen verbinden soll. Weitere "
+"Informationen über Ausfallsicherung und Redundanz finden Sie im Abschnitt "
+"»AUSFALLSICHERUNG«. Falls keine Option angegeben wurde, wird die Dienstsuche "
+"aktiviert. Weitere Informationen finden Sie im Abschnitt »DIENSTSUCHE«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:70
+msgid "The format of the URI must match the format defined in RFC 2732:"
+msgstr ""
+"Das Format der URI muss dem in RFC 2732 definierten Format entsprechen:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:73
+msgid "ldap[s]://&lt;host&gt;[:port]"
+msgstr "ldap[s]://&lt;Rechner&gt;[:Port]"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:76
+msgid ""
+"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
+msgstr ""
+"Wenn Sie explizit IPv6-Adressen verwenden möchten, muss &lt;Rechner&gt; in "
+"eckigen Klammern [] stehen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:79
+msgid "example: ldap://[fc00::126:25]:389"
+msgstr "Beispiel: ldap://[fc00::126:25]:389"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:85
+msgid "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
+msgstr "ldap_chpass_uri, ldap_chpass_backup_uri (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:88
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference to change the password of a user. "
+"Refer to the <quote>FAILOVER</quote> section for more information on "
+"failover and server redundancy."
+msgstr ""
+"gibt eine durch Kommata getrennte Liste von URIs der LDAP-Server an, mit "
+"denen SSSD sich in dieser Reihenfolge verbinden soll, um das Passwort eines "
+"Benutzers zu ändern. Weitere Informationen über Ausfallsicherung und "
+"Redundanz finden Sie im Abschnitt »AUSFALLSICHERUNG«. "
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:95
+msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
+msgstr ""
+"Um die Dienstsuche zu aktivieren, muss »ldap_chpass_dns_service_name« "
+"gesetzt sein."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:99
+msgid "Default: empty, i.e. ldap_uri is used."
+msgstr "Voreinstellung: leer, d.h., dass »ldap_uri« benutzt wird"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:105
+msgid "ldap_search_base (string)"
+msgstr "ldap_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:108
+msgid "The default base DN to use for performing LDAP user operations."
+msgstr ""
+"der Standardbasis-Domain-Name, der zur Durchführung von LDAP-"
+"Benutzeraktionen benutzt wird"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:112
+msgid ""
+"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
+"syntax:"
+msgstr ""
+"Beginnend mit SSSD 1.7.0 unterstützt SSSD mehrere Suchgrundlagen mittels der "
+"Syntax:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:116
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
+msgstr ""
+"search_base[?Gültigkeitsbereich?[Filter][?search_base?Gültigkeitsbereich?"
+"[Filter]]*]"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:119
+msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
+msgstr ""
+"Der Gültigkeitsbereich kann entweder »base«, »onelevel« oder »subtree« sein."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:122
+msgid ""
+"The filter must be a valid LDAP search filter as specified by http://www."
+"ietf.org/rfc/rfc2254.txt"
+msgstr ""
+"Der Filter muss ein gültiger LDAP-Suchfilter, wie durch http://www.ietf.org/"
+"rfc/rfc2254.txt spezifiziert, sein."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:126
+msgid "Examples:"
+msgstr "Beispiele:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:129
+msgid ""
+"ldap_search_base = dc=example,dc=com (which is equivalent to) "
+"ldap_search_base = dc=example,dc=com?subtree?"
+msgstr ""
+"ldap_search_base = dc=example,dc=com (dies entspricht) ldap_search_base = "
+"dc=example,dc=com?subtree?"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:134
+msgid ""
+"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
+"(host=thishost)?dc=example.com?subtree?"
+msgstr ""
+"ldap_search_base = cn=host_specific,dc=Beispiel,dc=com?Unterverzeichnis?"
+"(host=Dieser_Rechner)?dc=example.com?Unterverzeichnis?"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:137
+msgid ""
+"Note: It is unsupported to have multiple search bases which reference "
+"identically-named objects (for example, groups with the same name in two "
+"different search bases). This will lead to unpredictable behavior on client "
+"machines."
+msgstr ""
+"Hinweis: Mehrere Suchgrundlagen, die sich auf Objekte mit gleichem Namen "
+"beziehen, werden nicht unterstützt (zum Beispiel Gruppen mit demselben Namen "
+"in zwei unterschiedlichen Suchgrundlagen). Dies wird zu unvorhersehbarem "
+"Verhalten auf Client-Rechnern führen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:144
+msgid ""
+"Default: If not set, the value of the defaultNamingContext or namingContexts "
+"attribute from the RootDSE of the LDAP server is used. If "
+"defaultNamingContext does not exist or has an empty value namingContexts is "
+"used. The namingContexts attribute must have a single value with the DN of "
+"the search base of the LDAP server to make this work. Multiple values are "
+"are not supported."
+msgstr ""
+"Voreinstellung: Falls nicht gesetzt, wird der Wert der Attribute "
+"»defaultNamingContext« oder »namingContexts« vom RootDSE des LDAP-Servers "
+"benutzt. Falls »defaultNamingContext« nicht existiert oder ihr Wert leer "
+"ist, wird »namingContexts« verwendet. Das Attribut »namingContexts« muss "
+"einen einzelnen Wert mit dem Domain-Namen der Suchgrundlage des LDAP-Servers "
+"haben, damit dies funktioniert. Mehrere Werte werden nicht unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:158
+msgid "ldap_schema (string)"
+msgstr "ldap_schema (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:161
+msgid ""
+"Specifies the Schema Type in use on the target LDAP server. Depending on "
+"the selected schema, the default attribute names retrieved from the servers "
+"may vary. The way that some attributes are handled may also differ."
+msgstr ""
+"gibt den Schematyp an, der gerade auf dem Ziel-LDAP-Server benutzt wird. "
+"Abhängig vom ausgewählten Schema können sich die von den Servern geholten "
+"Standardattributnamen stark unterscheiden. Die Art, wie einige Attribute "
+"gehandhabt werden, kann sich ebenfalls unterscheiden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:168
+msgid "Four schema types are currently supported:"
+msgstr "Derzeit werden vier Schematypen unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:172
+msgid "rfc2307"
+msgstr "rfc2307"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:177
+msgid "rfc2307bis"
+msgstr "rfc2307bis"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:182
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:187
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:193
+msgid ""
+"The main difference between these schema types is how group memberships are "
+"recorded in the server. With rfc2307, group members are listed by name in "
+"the <emphasis>memberUid</emphasis> attribute. With rfc2307bis and IPA, "
+"group members are listed by DN and stored in the <emphasis>member</emphasis> "
+"attribute. The AD schema type sets the attributes to correspond with Active "
+"Directory 2008r2 values."
+msgstr ""
+"Der Hauptunterschied zwischen diesen Schematypen besteht darin, wie "
+"Gruppenmitgliedschaften auf dem Server aufgezeichnet werden. Mit »rfc2307« "
+"werden Gruppenmitglieder nach Namen im Attribut <emphasis>memberUid</"
+"emphasis> aufgeführt. Mit »rfc2307bis« bis »IPA« werden die "
+"Gruppenmitglieder nach Domain-Namen aufgeführt und im Attribut "
+"<emphasis>member</emphasis> gespeichert. Der Schematyp »AD« setzt die "
+"Attribute passend zu den Werten von Active Directory 2008r2."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:203
+msgid "Default: rfc2307"
+msgstr "Voreinstellung: rfc2307"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:209
+msgid "ldap_default_bind_dn (string)"
+msgstr "ldap_default_bind_dn (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:212
+msgid "The default bind DN to use for performing LDAP operations."
+msgstr ""
+"der Standard-Bind-Domain-Name, der zum Durchführen von LDAP-Aktionen benutzt "
+"wird"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:219
+msgid "ldap_default_authtok_type (string)"
+msgstr "ldap_default_authtok_type (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:222
+msgid "The type of the authentication token of the default bind DN."
+msgstr "der Typ des Authentifizierungs-Tokens des Standard-Bind-Domain-Namens"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:226
+msgid "The two mechanisms currently supported are:"
+msgstr "Die beiden derzeit unterstützten Mechanismen sind:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:229
+msgid "password"
+msgstr "password"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:232
+msgid "obfuscated_password"
+msgstr "obfuscated_password"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:235
+msgid "Default: password"
+msgstr "Voreinstellung: password"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:241
+msgid "ldap_default_authtok (string)"
+msgstr "ldap_default_authtok (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:244
+msgid ""
+"The authentication token of the default bind DN. Only clear text passwords "
+"are currently supported."
+msgstr ""
+"das Authentifizierungs-Token des Standard-Bind-Domain-Namens. Derzeit werden "
+"nur Klartextpasswörter unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:251
+msgid "ldap_user_object_class (string)"
+msgstr "ldap_user_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:254
+msgid "The object class of a user entry in LDAP."
+msgstr "die Objektklasse eines Benutzereintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:257
+msgid "Default: posixAccount"
+msgstr "Voreinstellung: posixAccount"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:263
+msgid "ldap_user_name (string)"
+msgstr "ldap_user_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:266
+msgid "The LDAP attribute that corresponds to the user's login name."
+msgstr "das LDAP-Attribut, das zum Anmeldenamen des Benutzers gehört"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:270
+msgid "Default: uid"
+msgstr "Voreinstellung: uid"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:276
+msgid "ldap_user_uid_number (string)"
+msgstr "ldap_user_uid_number (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:279
+msgid "The LDAP attribute that corresponds to the user's id."
+msgstr "das LDAP-Attribut, das zu der ID des Benutzers gehört"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:283
+msgid "Default: uidNumber"
+msgstr "Voreinstellung: uidNumber"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:289
+msgid "ldap_user_gid_number (string)"
+msgstr "ldap_user_gid_number (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:292
+msgid "The LDAP attribute that corresponds to the user's primary group id."
+msgstr "das LDAP-Attribut, das zu der Hauptgruppen-ID des Benutzers gehört"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:296 sssd-ldap.5.xml:778
+msgid "Default: gidNumber"
+msgstr "Voreinstellung: gidNumber"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:302
+msgid "ldap_user_gecos (string)"
+msgstr "ldap_user_gecos (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:305
+msgid "The LDAP attribute that corresponds to the user's gecos field."
+msgstr "das LDAP-Attribut, das zum Gecos-Feld des Benutzers gehört"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:309
+msgid "Default: gecos"
+msgstr "Voreinstellung: gecos"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:315
+msgid "ldap_user_home_directory (string)"
+msgstr "ldap_user_home_directory (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:318
+msgid "The LDAP attribute that contains the name of the user's home directory."
+msgstr ""
+"das LDAP-Attribut, das den Namen des Home-Verzeichnisses des Benutzers "
+"enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:322
+msgid "Default: homeDirectory"
+msgstr "Voreinstellung: homeDirectory"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:328
+msgid "ldap_user_shell (string)"
+msgstr "ldap_user_shell (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:331
+msgid "The LDAP attribute that contains the path to the user's default shell."
+msgstr ""
+"das LDAP-Attribut, das den Pfad zur Standard-Shell des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:335
+msgid "Default: loginShell"
+msgstr "Voreinstellung: loginShell"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:341
+msgid "ldap_user_uuid (string)"
+msgstr "ldap_user_uuid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:344
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
+msgstr ""
+"das LDAP-Attribut, das die UUID/GUID eines LDAP-Benutzerobjekts enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:348 sssd-ldap.5.xml:804 sssd-ldap.5.xml:990
+msgid "Default: nsUniqueId"
+msgstr "Voreinstellung: nsUniqueId"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:354
+msgid "ldap_user_objectsid (string)"
+msgstr "ldap_user_objectsid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:357
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP user object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+"das LDAP-Attribut, das die objectSID eines LDAP-Benutzerobjekts enthält. "
+"Dies wird normalerweise nur für Active-Directory-Server benötigt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:362 sssd-ldap.5.xml:818
+msgid "Default: objectSid for ActiveDirectory, not set for other servers."
+msgstr ""
+"Voreinstellung: objectSid für Active Directory, für andere Server nicht "
+"gesetzt"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:369
+msgid "ldap_user_modify_timestamp (string)"
+msgstr "ldap_user_modify_timestamp (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:372 sssd-ldap.5.xml:828 sssd-ldap.5.xml:999
+msgid ""
+"The LDAP attribute that contains timestamp of the last modification of the "
+"parent object."
+msgstr ""
+"das LDAP-Attribut, das den Zeitstempel der letzten Änderung im "
+"übergeordneten Objekt enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:376 sssd-ldap.5.xml:832 sssd-ldap.5.xml:1006
+msgid "Default: modifyTimestamp"
+msgstr "Voreinstellung: modifyTimestamp"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:382
+msgid "ldap_user_shadow_last_change (string)"
+msgstr "ldap_user_shadow_last_change (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:385
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
+"the last password change)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (Datum der letzten Passwortänderung) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:395
+msgid "Default: shadowLastChange"
+msgstr "Voreinstellung: shadowLastChange"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:401
+msgid "ldap_user_shadow_min (string)"
+msgstr "ldap_user_shadow_min (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:404
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
+"password age)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (Mindestpasswortalter) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:413
+msgid "Default: shadowMin"
+msgstr "Voreinstellung: shadowMin"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:419
+msgid "ldap_user_shadow_max (string)"
+msgstr "ldap_user_shadow_max (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:422
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
+"password age)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (maximales Passwortalter) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:431
+msgid "Default: shadowMax"
+msgstr "Voreinstellung: shadowMax"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:437
+msgid "ldap_user_shadow_warning (string)"
+msgstr "ldap_user_shadow_warning (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:440
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password warning period)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (Passwortwarnperiode) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:450
+msgid "Default: shadowWarning"
+msgstr "Voreinstellung: shadowWarning"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:456
+msgid "ldap_user_shadow_inactive (string)"
+msgstr "ldap_user_shadow_inactive (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:459
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password inactivity period)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (Passwortinaktivitätsperiode) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:469
+msgid "Default: shadowInactive"
+msgstr "Voreinstellung: shadowInactive"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:475
+msgid "ldap_user_shadow_expire (string)"
+msgstr "ldap_user_shadow_expire (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:478
+msgid ""
+"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
+"parameter contains the name of an LDAP attribute corresponding to its "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> counterpart (account expiration date)."
+msgstr ""
+"Wenn »ldap_pwd_policy=shadow« benutzt wird, enthält dieser Parameter den "
+"Namen eines LDAP-Attributs, das zum entsprechenden Gegenstück von "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> (Ablaufdatum des Kontos) gehört."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:488
+msgid "Default: shadowExpire"
+msgstr "Voreinstellung: shadowExpire"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:494
+msgid "ldap_user_krb_last_pwd_change (string)"
+msgstr "ldap_user_krb_last_pwd_change (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:497
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time of last password change in "
+"kerberos."
+msgstr ""
+"Wenn »ldap_pwd_policy=mit_kerberos« benutzt wird, enthält dieser Parameter "
+"den Namen eines LDAP-Attributs, in dem Datum und Zeit der letzten "
+"Passwortänderung in Kerberos gespeichert sind."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:503
+msgid "Default: krbLastPwdChange"
+msgstr "Voreinstellung: krbLastPwdChange"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:509
+msgid "ldap_user_krb_password_expiration (string)"
+msgstr "ldap_user_krb_password_expiration (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:512
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time when current password expires."
+msgstr ""
+"Wenn »ldap_pwd_policy=mit_kerberos« benutzt wird, enthält dieser Parameter "
+"den Namen eines LDAP-Attributs, welches das Datum und die Zeit enthält, wann "
+"das aktuelle Passwort erlischt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:518
+msgid "Default: krbPasswordExpiration"
+msgstr "Voreinstellung: krbPasswordExpiration"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:524
+msgid "ldap_user_ad_account_expires (string)"
+msgstr "ldap_user_ad_account_expires (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:527
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the expiration time of the account."
+msgstr ""
+"Wenn »ldap_account_expire_policy=ad« benutzt wird, enthält dieser Parameter "
+"den Namen eines LDAP-Attributs, in dem die Zeit gespeichert ist, wann das "
+"Konto erlischt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:532
+msgid "Default: accountExpires"
+msgstr "Voreinstellung: accountExpires"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:538
+msgid "ldap_user_ad_user_account_control (string)"
+msgstr "ldap_user_ad_user_account_control (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:541
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the user account control bit field."
+msgstr ""
+"Wenn »ldap_account_expire_policy=ad« benutzt wird, enthält dieser Parameter "
+"den Namen eines LDAP-Attributs, in dem das Steuer-Bit-Feld des "
+"Benutzerkontos gespeichert ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:546
+msgid "Default: userAccountControl"
+msgstr "Voreinstellung: userAccountControl"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:552
+msgid "ldap_ns_account_lock (string)"
+msgstr "ldap_ns_account_lock (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:555
+msgid ""
+"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
+"determines if access is allowed or not."
+msgstr ""
+"Wenn »ldap_account_expire_policy=rhds« oder Entsprechendes benutzt wird, "
+"legt dieser Parameter fest, ob Zugriff gewährt wird oder nicht."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:560
+msgid "Default: nsAccountLock"
+msgstr "Voreinstellung: nsAccountLock"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:566
+msgid "ldap_user_nds_login_disabled (string)"
+msgstr "ldap_user_nds_login_disabled (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:569
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines if "
+"access is allowed or not."
+msgstr ""
+"Wenn »ldap_account_expire_policy=nds« benutzt wird, legt dieses Attribut "
+"fest, ob Zugriff gewährt wird oder nicht."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:573 sssd-ldap.5.xml:587
+msgid "Default: loginDisabled"
+msgstr "Voreinstellung: loginDisabled"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:579
+msgid "ldap_user_nds_login_expiration_time (string)"
+msgstr "ldap_user_nds_login_expiration_time (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:582
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines until "
+"which date access is granted."
+msgstr ""
+"Wenn »ldap_account_expire_policy=nds« benutzt wird, legt dieser Parameter "
+"fest, bis zu welchem Datum Zugriff gewährt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:593
+msgid "ldap_user_nds_login_allowed_time_map (string)"
+msgstr "ldap_user_nds_login_allowed_time_map (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:596
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines the "
+"hours of a day in a week when access is granted."
+msgstr ""
+"Wenn »ldap_account_expire_policy=nds« benutzt wird, legt dieses Attribut die "
+"Stunden eines Wochentages fest, in denen Zugriff gewährt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:601
+msgid "Default: loginAllowedTimeMap"
+msgstr "Voreinstellung: loginAllowedTimeMap"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:607
+msgid "ldap_user_principal (string)"
+msgstr "ldap_user_principal (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:610
+msgid ""
+"The LDAP attribute that contains the user's Kerberos User Principal Name "
+"(UPN)."
+msgstr ""
+"das LDAP-Attribut, das den Kerberos User Principal Name (UPN/"
+"Hauptbenutzername) enthält."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:614
+msgid "Default: krbPrincipalName"
+msgstr "Voreinstellung: krbPrincipalName"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:620
+msgid "ldap_user_ssh_public_key (string)"
+msgstr "ldap_user_ssh_public_key (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:623
+msgid "The LDAP attribute that contains the user's SSH public keys."
+msgstr ""
+"das LDAP-Attribut, das die öffentlichen SSH-Schlüssel des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:630
+msgid "ldap_force_upper_case_realm (boolean)"
+msgstr "ldap_force_upper_case_realm (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:633
+msgid ""
+"Some directory servers, for example Active Directory, might deliver the "
+"realm part of the UPN in lower case, which might cause the authentication to "
+"fail. Set this option to a non-zero value if you want to use an upper-case "
+"realm."
+msgstr ""
+"Einige Verzeichnisserver, zum Beispiel Active Directory, könnten den Realm-"
+"Teil der UPN in Kleinbuchstaben liefern, was zum Scheitern der "
+"Authentifizierung führen kann. Setzen Sie diese Option auf einen Wert "
+"ungleich Null, falls Sie einen Realm in Großbuchstaben wünschen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:646
+msgid "ldap_enumeration_refresh_timeout (integer)"
+msgstr "ldap_enumeration_refresh_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:649
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing its cache of "
+"enumerated records."
+msgstr ""
+"gibt an, wie viele Sekunden lang SSSD warten soll, bevor es seinen "
+"Zwischenspeicher aufgezählter Datensätze aktualisiert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:660
+msgid "ldap_purge_cache_timeout (integer)"
+msgstr "ldap_purge_cache_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:663
+msgid ""
+"Determine how often to check the cache for inactive entries (such as groups "
+"with no members and users who have never logged in) and remove them to save "
+"space."
+msgstr ""
+"bestimmt, wie oft der Zwischenspeicher auf inaktive Einträge überprüft wird "
+"(wie Gruppen ohne Mitglieder und Benutzer, die sich noch nie angemeldet "
+"haben) und diese entfernt werden, um Platz zu sparen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:669
+msgid "Setting this option to zero will disable the cache cleanup operation."
+msgstr ""
+"Wird diese Option auf null gesetzt, wird das Aufräumen des Zwischenspeichers "
+"deaktiviert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:673
+msgid "Default: 10800 (12 hours)"
+msgstr "Voreinstellung: 10800 (12 Stunden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:679
+msgid "ldap_user_fullname (string)"
+msgstr "ldap_user_fullname (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:682
+msgid "The LDAP attribute that corresponds to the user's full name."
+msgstr "das LDAP-Attribut, das dem vollständigen Benutzernamen entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:686 sssd-ldap.5.xml:765 sssd-ldap.5.xml:940
+#: sssd-ldap.5.xml:1031 sssd-ldap.5.xml:1893 sssd-ldap.5.xml:2219
+#: sssd-ipa.5.xml:467
+msgid "Default: cn"
+msgstr "Voreinstellung: cn"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:692
+msgid "ldap_user_member_of (string)"
+msgstr "ldap_user_member_of (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:695
+msgid "The LDAP attribute that lists the user's group memberships."
+msgstr ""
+"das LDAP-Attribut, das die Gruppenmitgliedschaften des Benutzers aufführt"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:699 sssd-ipa.5.xml:371
+msgid "Default: memberOf"
+msgstr "Voreinstellung: memberOf"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:705
+msgid "ldap_user_authorized_service (string)"
+msgstr "ldap_user_authorized_service (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:708
+msgid ""
+"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
+"use the presence of the authorizedService attribute in the user's LDAP entry "
+"to determine access privilege."
+msgstr ""
+"Falls »access_provider=ldap« und »ldap_access_order=authorized_service« "
+"benutzt werden, wird SSSD die Anwesenheit das Attributs »authorizedService« "
+"im LDAP-Eintrag den Benutzers nutzen, um die Zugriffsrechte zu bestimmen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:715
+msgid ""
+"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
+"explicit allow (svc) and finally for allow_all (*)."
+msgstr ""
+"Ein explizites Verweigern (»!svc«) wird zuerst aufgelöst. Als Zweites sucht "
+"SSSD eine explizite Erlaubnis (»svc«) und zuletzt nach »allow_all« (*)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:720
+msgid "Default: authorizedService"
+msgstr "Voreinstellung: authorizedService"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:726
+msgid "ldap_user_authorized_host (string)"
+msgstr "ldap_user_authorized_host (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:729
+msgid ""
+"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
+"presence of the host attribute in the user's LDAP entry to determine access "
+"privilege."
+msgstr ""
+"Falls »access_provider=ldap« und »ldap_access_order=host« benutzt werden, "
+"wird SSSD die Anwesenheit das Attributs »host« im LDAP-Eintrag den Benutzers "
+"verwenden, um die Zugriffsrechte zu bestimmen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:735
+msgid ""
+"An explicit deny (!host) is resolved first. Second, SSSD searches for "
+"explicit allow (host) and finally for allow_all (*)."
+msgstr ""
+"Ein explizites Verweigern (»!host«) wird zuerst aufgelöst. Als Zweites sucht "
+"SSSD eine explizite Erlaubnis (»host«) und zuletzt nach »allow_all« (*)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:740
+msgid "Default: host"
+msgstr "Voreinstellung: host"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:746
+msgid "ldap_group_object_class (string)"
+msgstr "ldap_group_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:749
+msgid "The object class of a group entry in LDAP."
+msgstr "die Objektklasse eines Gruppeneintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:752
+msgid "Default: posixGroup"
+msgstr "Voreinstellung: posixGroup"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:758
+msgid "ldap_group_name (string)"
+msgstr "ldap_group_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:761
+msgid "The LDAP attribute that corresponds to the group name."
+msgstr "das LDAP-Attribut, das dem Gruppennamen entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:771
+msgid "ldap_group_gid_number (string)"
+msgstr "ldap_group_gid_number (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:774
+msgid "The LDAP attribute that corresponds to the group's id."
+msgstr "das LDAP-Attribut, das der Gruppen-ID entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:784
+msgid "ldap_group_member (string)"
+msgstr "ldap_group_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:787
+msgid "The LDAP attribute that contains the names of the group's members."
+msgstr "das LDAP-Attribut, das die Namen der Gruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:791
+msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
+msgstr "Voreinstellung: memberuid (rfc2307) / member (rfc2307bis)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:797
+msgid "ldap_group_uuid (string)"
+msgstr "ldap_group_uuid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:800
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
+msgstr "das LDAP-Attribut, das die UUID/GUID eines LDAP-Gruppenobjekts enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:810
+msgid "ldap_group_objectsid (string)"
+msgstr "ldap_group_objectsid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:813
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP group object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+"das LDAP-Attribut, das die ObjectSID eines LDAP-Gruppenobjekts enthält. Dies "
+"wird normalerweise nur für Active-Directory-Server benötigt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:825
+msgid "ldap_group_modify_timestamp (string)"
+msgstr "ldap_group_modify_timestamp (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:838
+msgid "ldap_group_nesting_level (integer)"
+msgstr "ldap_group_nesting_level (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:841
+msgid ""
+"If ldap_schema is set to a schema format that supports nested groups (e.g. "
+"RFC2307bis), then this option controls how many levels of nesting SSSD will "
+"follow. This option has no effect on the RFC2307 schema."
+msgstr ""
+"Falls »ldap_schema« auf ein Format gesetzt ist, das verschachtelte Gruppen "
+"(z.B. RFC2307bis) unterstützt, dann steuert diese Option, wie viele Stufen "
+"tief SSSD der Verschachtelung folgt. Diese Option hat keine Auswirkungen auf "
+"das Schema RFC2307."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:848
+msgid "Default: 2"
+msgstr "Voreinstellung: 2"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:854
+msgid "ldap_groups_use_matching_rule_in_chain"
+msgstr "ldap_groups_use_matching_rule_in_chain"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:857
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which may speed up group lookup operations on deployments with "
+"complex or deep nested groups."
+msgstr ""
+"Diese Option teilt SSSD mit, dass es den Vorteil einer Active-Directory-"
+"spezifischen Funktionalität nutzen soll, die Gruppenachschlageoptionen und "
+"Bereitstellungen mit komplexen oder tief verschachtelten Gruppen zu "
+"beschleunigen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:863
+msgid ""
+"In most common cases, it is best to leave this option disabled. It generally "
+"only provides a performance increase on very complex nestings."
+msgstr ""
+"In den meisten Fällen ist es am besten, diese Option deaktiviert zu lassen. "
+"Normalerweise führt sie nur bei sehr komplexen Verschachtelungen zu einer "
+"Leistungssteigerung."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:868 sssd-ldap.5.xml:895
+msgid ""
+"If this option is enabled, SSSD will use it if it detects that the server "
+"supports it during initial connection. So \"True\" here essentially means "
+"\"auto-detect\"."
+msgstr ""
+"Falls diese Option aktiviert ist und SSSD beim Verbinden feststellt, dass "
+"der Server sie unterstützt, wird SSSD sie verwenden. Daher bedeutet hier "
+"»True« eigentlich »auto-detect«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:874 sssd-ldap.5.xml:901
+msgid ""
+"Note: This feature is currently known to work only with Active Directory "
+"2008 R1 and later. See <ulink url=\"http://msdn.microsoft.com/en-us/library/"
+"windows/desktop/aa746475%28v=vs.85%29.aspx\"> MSDN(TM) documentation</ulink> "
+"for more details."
+msgstr ""
+"Hinweis: Es ist bekannt, dass diese Funktionalität derzeit nur mit Active "
+"Directory 2008 R1 und neuer funktioniert. Weitere Einzelheiten finden Sie in "
+"der <ulink url=\"http://msdn.microsoft.com/en-us/library/windows/desktop/"
+"aa746475%28v=vs.85%29.aspx\"> MSDN™-Dokumentation</ulink>."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:880 sssd-ldap.5.xml:907 sssd-ldap.5.xml:1198
+#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1671 include/ldap_id_mapping.xml:184
+msgid "Default: False"
+msgstr "Voreinstellung: False"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:886
+msgid "ldap_initgroups_use_matching_rule_in_chain"
+msgstr "ldap_initgroups_use_matching_rule_in_chain"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:889
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which might speed up initgroups operations (most notably when "
+"dealing with complex or deep nested groups)."
+msgstr ""
+"Diese Option teilt SSSD mit, dass es den Vorteil einer Active-Directory-"
+"spezifischen Funktionalität nutzen soll, die möglicherweise Initgroups-"
+"Aktionen beschleunigt (vor allem, beim Umgang mit komplexen oder "
+"verschachtelten Gruppen)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:913
+msgid "ldap_netgroup_object_class (string)"
+msgstr "ldap_netgroup_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:916
+msgid "The object class of a netgroup entry in LDAP."
+msgstr "die Objektklasse eines Netzgruppeneintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:919
+msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
+msgstr ""
+"Beim IPA-Anbieter sollte stattdessen »ipa_netgroup_object_class« benutzt "
+"werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:923
+msgid "Default: nisNetgroup"
+msgstr "Voreinstellung: nisNetgroup"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:929
+msgid "ldap_netgroup_name (string)"
+msgstr "ldap_netgroup_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:932
+msgid "The LDAP attribute that corresponds to the netgroup name."
+msgstr "das LDAP-Attribut, das dem Netzgruppennamen entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:936
+msgid "In IPA provider, ipa_netgroup_name should be used instead."
+msgstr ""
+"Beim IPA-Anbieter sollte stattdessen »ipa_netgroup_name« benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:946
+msgid "ldap_netgroup_member (string)"
+msgstr "ldap_netgroup_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:949
+msgid "The LDAP attribute that contains the names of the netgroup's members."
+msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:953
+msgid "In IPA provider, ipa_netgroup_member should be used instead."
+msgstr ""
+"Beim IPA-Anbieter sollte stattdessen »ipa_netgroup_member« benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:957
+msgid "Default: memberNisNetgroup"
+msgstr "Voreinstellung: memberNisNetgroup"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:963
+msgid "ldap_netgroup_triple (string)"
+msgstr "ldap_netgroup_triple (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:966
+msgid ""
+"The LDAP attribute that contains the (host, user, domain) netgroup triples."
+msgstr ""
+"das LDAP-Attribut, das die Netzgruppen-Triples (Rechner, Benutzer, Domain) "
+"enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:970 sssd-ldap.5.xml:1003
+msgid "This option is not available in IPA provider."
+msgstr "Diese Option ist für IPA-Anbieter nicht verfügbar."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:973
+msgid "Default: nisNetgroupTriple"
+msgstr "Voreinstellung: nisNetgroupTriple"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:979
+msgid "ldap_netgroup_uuid (string)"
+msgstr "ldap_netgroup_uuid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:982
+msgid ""
+"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+msgstr ""
+"das LDAP-Attribut, das die UUID/GUID eines LDAP-Netzgruppenobjekts enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:986
+msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
+msgstr ""
+"Beim IPA-Anbieter sollte stattdessen »ipa_netgroup_member« benutzt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:996
+msgid "ldap_netgroup_modify_timestamp (string)"
+msgstr "ldap_netgroup_modify_timestamp (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1012
+msgid "ldap_service_object_class (string)"
+msgstr "ldap_service_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1015
+msgid "The object class of a service entry in LDAP."
+msgstr "die Objektklasse eines Diensteintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1018
+msgid "Default: ipService"
+msgstr "Voreinstellung: ipService"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1024
+msgid "ldap_service_name (string)"
+msgstr "ldap_service_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1027
+msgid ""
+"The LDAP attribute that contains the name of service attributes and their "
+"aliases."
+msgstr ""
+"das LDAP-Attribut, das die Namen von Dienstattributen und ihre Alias enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1037
+msgid "ldap_service_port (string)"
+msgstr "ldap_service_port (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1040
+msgid "The LDAP attribute that contains the port managed by this service."
+msgstr "das LDAP-Attribut, das den von diesem Dienst verwalteten Port enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1044
+msgid "Default: ipServicePort"
+msgstr "Voreinstellung: ipServicePort"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1050
+msgid "ldap_service_proto (string)"
+msgstr "ldap_service_proto (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1053
+msgid ""
+"The LDAP attribute that contains the protocols understood by this service."
+msgstr ""
+"das LDAP-Attribut, das die von diesem Dienst verstandenen Protokolle enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1057
+msgid "Default: ipServiceProtocol"
+msgstr "Voreinstellung: ipServiceProtocol"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1063
+msgid "ldap_service_search_base (string)"
+msgstr "ldap_service_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1068
+msgid "ldap_search_timeout (integer)"
+msgstr "ldap_search_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1071
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches are allowed to run "
+"before they are cancelled and cached results are returned (and offline mode "
+"is entered)"
+msgstr ""
+"gibt den Zeitpunkt der Zeitüberschreitung (in Sekunden) an, bis zu dem LDAP-"
+"Suchen laufen dürfen, bevor sie abgebrochen und die zwischengespeicherten "
+"Ergebnisse zurückgegeben werden (und in den Offline-Modus gegangen wird)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1077
+msgid ""
+"Note: this option is subject to change in future versions of the SSSD. It "
+"will likely be replaced at some point by a series of timeouts for specific "
+"lookup types."
+msgstr ""
+"Hinweis: Diese Option ist in zukünftigen Versionen von SSSD Gegenstand von "
+"Änderungen. Sie wird wahrscheinlich an einigen Stellen durch Serien von "
+"Zeitüberschreitungspunkten für spezielle Nachschlagetypen ersetzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1089
+msgid "ldap_enumeration_search_timeout (integer)"
+msgstr "ldap_enumeration_search_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1092
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches for user and group "
+"enumerations are allowed to run before they are cancelled and cached results "
+"are returned (and offline mode is entered)"
+msgstr ""
+"gibt den Zeitpunkt der Zeitüberschreitung (in Sekunden) an, bis zu dem LDAP-"
+"Suchen nach Benutzer- und Gruppenaufzählungen laufen dürfen, bevor sie "
+"abgebrochen und die zwischengespeicherten Ergebnisse zurückgegeben werden "
+"(und in den Offline-Modus gegangen wird)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1105
+msgid "ldap_network_timeout (integer)"
+msgstr "ldap_network_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1108
+msgid ""
+"Specifies the timeout (in seconds) after which the <citerefentry> "
+"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
+"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
+"manvolnum> </citerefentry> following a <citerefentry> "
+"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
+"citerefentry> returns in case of no activity."
+msgstr ""
+"gibt den Zeitpunkt der Zeitüberschreitung (in Sekunden) an, nach dem "
+"<citerefentry> <refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> "
+"</citerefentry>/<citerefentry> <refentrytitle>select</refentrytitle> "
+"<manvolnum>2</manvolnum> </citerefentry> gefolgt von einem <citerefentry> "
+"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
+"citerefentry> zurückkehrt, falls keine Aktivität stattfindet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1131
+msgid "ldap_opt_timeout (integer)"
+msgstr "ldap_opt_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1134
+msgid ""
+"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
+"will abort if no response is received. Also controls the timeout when "
+"communicating with the KDC in case of SASL bind."
+msgstr ""
+"gibt den Zeitpunkt der Zeitüberschreitung (in Sekunden) an, nach dem das "
+"Aufrufen synchroner LDAP-APIs abgebrochen wird, falls keine Antwort "
+"empfangen wird. Es steuert außerdem die Zeitüberschreitung, wenn im Fall von "
+"SASL-Bind mit der Schlüsselverwaltungszentrale (KDC) kommuniziert wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1146
+msgid "ldap_connection_expire_timeout (integer)"
+msgstr "ldap_connection_expire_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1149
+msgid ""
+"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
+"maintained. After this time, the connection will be re-established. If used "
+"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
+"the TGT lifetime) will be used."
+msgstr ""
+"gibt den Zeitpunkt der Zeitüberschreitung (in Sekunden) an, bis zu dem eine "
+"Verbindung zu einem LDAP-Server aufrechterhalten wird. Nach dieser Zeit wird "
+"die Verbindung erneut aufgebaut. Wird dies parallel zu SASL/GSSAPI benutzt, "
+"wird der frühere der beiden Werte (dieser Wert gegenüber der TGT-"
+"Lebensdauer) verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1157 sssd-ldap.5.xml:2050
+msgid "Default: 900 (15 minutes)"
+msgstr "Voreinstellung: 900 (15 Minuten)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1163
+msgid "ldap_page_size (integer)"
+msgstr "ldap_page_size (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1166
+msgid ""
+"Specify the number of records to retrieve from LDAP in a single request. "
+"Some LDAP servers enforce a maximum limit per-request."
+msgstr ""
+"gibt die Anzahl der Datensätze an, die in einer einzelnen Anfrage von LDAP "
+"empfangen werden. Einige LDAP-Server erzwingen eine Begrenzung des Maximums "
+"pro Anfrage."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1171
+msgid "Default: 1000"
+msgstr "Voreinstellung: 1000"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1177
+msgid "ldap_disable_paging (boolean)"
+msgstr "ldap_disable_paging (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1180
+msgid ""
+"Disable the LDAP paging control. This option should be used if the LDAP "
+"server reports that it supports the LDAP paging control in its RootDSE but "
+"it is not enabled or does not behave properly."
+msgstr ""
+"deaktiviert die Seitenadressierungssteuerung von LDAP. Diese Option sollte "
+"benutzt werden, falls der LDAP-Server meldet, dass er die LDAP-"
+"Seitenadressierungssteuerung in seinem RootDSE unterstützt, sie jedoch "
+"deaktiviert ist oder sich nicht ordnungsgemäß verhält."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1186
+msgid ""
+"Example: OpenLDAP servers with the paging control module installed on the "
+"server but not enabled will report it in the RootDSE but be unable to use it."
+msgstr ""
+"Beispiel: OpenLDAP-Server, bei denen das Seitenadressierungssteuerungsmodul "
+"installiert, aber nicht aktiviert ist, werden es im RootDSE melden, sind "
+"aber nicht in der Lage, es zu benutzen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1192
+msgid ""
+"Example: 389 DS has a bug where it can only support a one paging control at "
+"a time on a single connection. On busy clients, this can result in some "
+"requests being denied."
+msgstr ""
+"Beispiel: 389 DS hat einen Fehler, durch den es gleichzeitig nur eine "
+"einzige Seitenadressierungssteuerung für eine einzelne Verbindung benutzen "
+"kann. Bei ausgelasteten Clients kann dies dazu führen, dass manche Anfragen "
+"abgelehnt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1204
+msgid "ldap_disable_range_retrieval (boolean)"
+msgstr "ldap_disable_range_retrieval (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1207
+msgid "Disable Active Directory range retrieval."
+msgstr "deaktiviert die Bereichsabfrage von Active Directory"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1210
+msgid ""
+"Active Directory limits the number of members to be retrieved in a single "
+"lookup using the MaxValRange policy (which defaults to 1500 members). If a "
+"group contains more members, the reply would include an AD-specific range "
+"extension. This option disables parsing of the range extension, therefore "
+"large groups will appear as having no members."
+msgstr ""
+"Active Directory begrenzt die Anzahl der Mitglieder, die in einem einzigen "
+"Nachschlagen mittels der MaxValRange-Richtlinie empfangen werden können (die "
+"Voreinstellung sind 1.500 Mitglieder). Falls eine Gruppe mehr Mitglieder "
+"enthält, wird die Antwort eine AD-spezifische Bereichserweiterung enthalten. "
+"Diese Option deaktiviert das Auswerten der Bereichserweiterung, daher wird "
+"es so aussehen, als ob große Gruppen keine Mitglieder hätten."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1225
+msgid "ldap_sasl_minssf (integer)"
+msgstr "ldap_sasl_minssf (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1228
+msgid ""
+"When communicating with an LDAP server using SASL, specify the minimum "
+"security level necessary to establish the connection. The values of this "
+"option are defined by OpenLDAP."
+msgstr ""
+"Wenn mittels SASL mit einem LDAP-Server kommuniziert wird, gibt dies die "
+"mindestens nötige Sicherheitsstufe zum Herstellen der Verbindung an. Die "
+"Werte dieser Option werden durch OpenLDAP definiert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1234
+msgid "Default: Use the system default (usually specified by ldap.conf)"
+msgstr ""
+"Voreinstellung: verwendet die Voreinstellungen des System (normalerweise in "
+"»ldap.conf« angegeben)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1241
+msgid "ldap_deref_threshold (integer)"
+msgstr "ldap_deref_threshold (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1244
+msgid ""
+"Specify the number of group members that must be missing from the internal "
+"cache in order to trigger a dereference lookup. If less members are missing, "
+"they are looked up individually."
+msgstr ""
+"gibt die Anzahl der Gruppenmitglieder an, die aus dem internen "
+"Zwischenspeicher fehlen muss, um ein dereferenzierendes Nachschlagen "
+"auszulösen. Falls weniger Mitglieder fehlen, werden sie individuell "
+"nachgeschlagen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1250
+msgid ""
+"You can turn off dereference lookups completely by setting the value to 0."
+msgstr ""
+"Sie können dereferenzierendes Nachschlagen komplett ausschalten, indem Sie "
+"den Wert auf 0 setzen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1254
+msgid ""
+"A dereference lookup is a means of fetching all group members in a single "
+"LDAP call. Different LDAP servers may implement different dereference "
+"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
+"Directory."
+msgstr ""
+"Dereferenzierendes Nachschlagen ist ein Mittel, um alle Gruppenmitglieder in "
+"einem einzigen LDAP-Aufruf abzuholen. Verschiedene LDAP-Server können "
+"unterschiedliche Methoden zum Dereferenzieren implementieren. Die derzeit "
+"unterstützten Server sind 389/RHDS, OpenLDAP und Active Directory."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1262
+msgid ""
+"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
+"filter, then the dereference lookup performance enhancement will be disabled "
+"regardless of this setting."
+msgstr ""
+"<emphasis>Hinweis:</emphasis> Falls eine der Suchgrundlagen einen Suchfilter "
+"angibt, wird die Verbesserung der Leistung beim dereferenzierenden "
+"Nachschlagen ohne Rücksicht auf die Einstellung deaktiviert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1275
+msgid "ldap_tls_reqcert (string)"
+msgstr "ldap_tls_reqcert (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1278
+msgid ""
+"Specifies what checks to perform on server certificates in a TLS session, if "
+"any. It can be specified as one of the following values:"
+msgstr ""
+"gibt an, welche Prüfungen von Server-Zertifikaten in einer TLS-Sitzung "
+"durchgeführt werden, falls vorhanden. Dies kann in Form einer der folgenden "
+"Werte angegeben werden:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1284
+msgid ""
+"<emphasis>never</emphasis> = The client will not request or check any server "
+"certificate."
+msgstr ""
+"<emphasis>never</emphasis> = Der Client wird kein Server-Zertifikat prüfen "
+"oder anfordern."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1288
+msgid ""
+"<emphasis>allow</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, it will be ignored and the session proceeds normally."
+msgstr ""
+"<emphasis>allow</emphasis> = Das Server-Zertifikat wird angefordert. Falls "
+"kein Zertifikat bereitgestellt wird, fährt die Sitzung normal fort. Falls "
+"ein ungültiges Zertifikat bereitgestellt wird, wird es ignoriert und die "
+"Sitzung fährt normal fort."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1295
+msgid ""
+"<emphasis>try</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, the session is immediately terminated."
+msgstr ""
+"<emphasis>try</emphasis> = Das Server-Zertifikat wird angefordert. Falls das "
+"Zertifikat bereitgestellt wird, fährt die Sitzung normal fort. Falls ein "
+"ungültiges Zertifikat bereitgestellt wird, wird die Sitzung sofort beendet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1301
+msgid ""
+"<emphasis>demand</emphasis> = The server certificate is requested. If no "
+"certificate is provided, or a bad certificate is provided, the session is "
+"immediately terminated."
+msgstr ""
+"<emphasis>demand</emphasis> = Das Server-Zertifikat wird angefordert. Falls "
+"kein oder ein ungültiges Zertifikat bereitgestellt wird, wird die Sitzung "
+"sofort beendet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1307
+msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
+msgstr "<emphasis>hard</emphasis> = entspricht »demand«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1311
+msgid "Default: hard"
+msgstr "Voreinstellung: hard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1317
+msgid "ldap_tls_cacert (string)"
+msgstr "ldap_tls_cacert (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1320
+msgid ""
+"Specifies the file that contains certificates for all of the Certificate "
+"Authorities that <command>sssd</command> will recognize."
+msgstr ""
+"gibt die Datei an, die Zertifikate für alle Zertifizierungstellen enthält, "
+"die <command>sssd</command> erkennen wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1325 sssd-ldap.5.xml:1343 sssd-ldap.5.xml:1384
+msgid ""
+"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
+"conf</filename>"
+msgstr ""
+"Voreinstellung: verwendet OpenLDAP-Voreinstellungen, normalerweise aus "
+"<filename>/etc/openldap/ldap.conf</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1332
+msgid "ldap_tls_cacertdir (string)"
+msgstr "ldap_tls_cacertdir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1335
+msgid ""
+"Specifies the path of a directory that contains Certificate Authority "
+"certificates in separate individual files. Typically the file names need to "
+"be the hash of the certificate followed by '.0'. If available, "
+"<command>cacertdir_rehash</command> can be used to create the correct names."
+msgstr ""
+"gibt den Pfad eines Verzeichnisses an, das Zertifikate von "
+"Zertifizierungstellen in separaten individuellen Dateien enthält. Die "
+"Dateinamen sollen normalerweise ein Hash-Wert des Zertifikats gefolgt von "
+"».0« sein. Falls verfügbar, kann <command>cacertdir_rehash</command> zum "
+"Erstellen der korrekten Namen verwendet werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1350
+msgid "ldap_tls_cert (string)"
+msgstr "ldap_tls_cert (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1353
+msgid "Specifies the file that contains the certificate for the client's key."
+msgstr ""
+"gibt die Datei an, die das Zertifikat für den Schlüssel des Clients enthält."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1363
+msgid "ldap_tls_key (string)"
+msgstr "ldap_tls_key (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1366
+msgid "Specifies the file that contains the client's key."
+msgstr "gibt die Datei an, die den Schlüssel des Clients enthält."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1375
+msgid "ldap_tls_cipher_suite (string)"
+msgstr "ldap_tls_cipher_suite (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1378
+msgid ""
+"Specifies acceptable cipher suites. Typically this is a colon sperated "
+"list. See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> for format."
+msgstr ""
+"gibt zulässige Chiffrierprogrammsammlungen an. Normalerweise ist dies eine "
+"durch Kommata getrennte Liste. Siehe bezüglich des Formats "
+"<citerefentry><refentrytitle>ldap.conf</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1391
+msgid "ldap_id_use_start_tls (boolean)"
+msgstr "ldap_id_use_start_tls (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1394
+msgid ""
+"Specifies that the id_provider connection must also use <systemitem class="
+"\"protocol\">tls</systemitem> to protect the channel."
+msgstr ""
+"gibt an, dass die Verbindung »id_provider« auch <systemitem class=\"protocol"
+"\">tls</systemitem> benutzen muss, um den Kanal abzusichern."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1404
+msgid "ldap_id_mapping (boolean)"
+msgstr "ldap_id_mapping (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1407
+msgid ""
+"Specifies that SSSD should attempt to map user and group IDs from the "
+"ldap_user_objectsid and ldap_group_objectsid attributes instead of relying "
+"on ldap_user_uid_number and ldap_group_gid_number."
+msgstr ""
+"gibt an, dass SSSD versuchen soll, die Benutzer- und Gruppen-ID von den "
+"Attributen »ldap_user_objectsid« und »ldap_group_objectsid« abzubilden, "
+"statt sich auf »ldap_user_uid_number« und »ldap_group_gid_number« zu "
+"verlassen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1413
+msgid "Currently this feature supports only ActiveDirectory objectSID mapping."
+msgstr ""
+"Derzeit unterstützt diese Funktionalität nur das Abbilden von Active-"
+"Directory-ObjectSIDs."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1423
+msgid "ldap_sasl_mech (string)"
+msgstr "ldap_sasl_mech (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1426
+msgid ""
+"Specify the SASL mechanism to use. Currently only GSSAPI is tested and "
+"supported."
+msgstr ""
+"gibt an, welcher SASL-Mechanismus benutzt werden soll. Derzeit ist nur "
+"GSSAPI getestet und wird unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1436
+msgid "ldap_sasl_authid (string)"
+msgstr "ldap_sasl_authid (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1439
+msgid ""
+"Specify the SASL authorization id to use. When GSSAPI is used, this "
+"represents the Kerberos principal used for authentication to the directory. "
+"This option can either contain the full principal (for example host/"
+"myhost@EXAMPLE.COM) or just the principal name (for example host/myhost)."
+msgstr ""
+"gibt an, welche SASL-Berechtigungs-ID benutzt werden soll. Wenn GSSAPI "
+"verwendet wird, steht dies für den Kerberos-Principal, der für die "
+"Authentifizierung zum Verzeichnis benutzt wird. Diese Option kann entweder "
+"den vollständigen Principal (zum Beispiel Rechner/MeinRechner@EXAMPLE.COM) "
+"oder nur den Namen des Principals (zum Beispiel Rechner/MeinRechner) "
+"enthalten."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1447
+msgid "Default: host/hostname@REALM"
+msgstr "Voreinstellung Rechner/MeinRechner@BEREICH"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1453
+msgid "ldap_sasl_realm (string)"
+msgstr "ldap_sasl_realm (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1456
+msgid ""
+"Specify the SASL realm to use. When not specified, this option defaults to "
+"the value of krb5_realm. If the ldap_sasl_authid contains the realm as "
+"well, this option is ignored."
+msgstr ""
+"gibt den SASL-Realm an, der benutzt werden soll. Wurde diese Option nicht "
+"angegeben, ist die Voreinstellung der Wert von »krb5_realm«. Falls "
+"»ldap_sasl_authid« ebenfalls den Realm enthält, wird diese Option ignoriert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1462
+msgid "Default: the value of krb5_realm."
+msgstr "Voreinstellung: der Wert von »krb5_realm«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1468
+msgid "ldap_sasl_canonicalize (boolean)"
+msgstr "ldap_sasl_canonicalize (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1471
+msgid ""
+"If set to true, the LDAP library would perform a reverse lookup to "
+"canonicalize the host name during a SASL bind."
+msgstr ""
+"Falls dies auf »true« gesetzt wäre, würde die LDAP-Bibliothek ein "
+"umgekehrtes Nachschlagen durchführen, um den Rechnernamen während eines SASL-"
+"Bind in eine kanonische Form zu bringen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1476
+msgid "Default: false;"
+msgstr "Voreinstellung: false;"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1482
+msgid "ldap_krb5_keytab (string)"
+msgstr "ldap_krb5_keytab (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1485
+msgid "Specify the keytab to use when using SASL/GSSAPI."
+msgstr "gibt die Keytab an, wenn SASL/GSSAPI benutzt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1488
+msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
+msgstr ""
+"Voreinstellung: Keytab des Systems, normalerweise <filename>/etc/krb5."
+"keytab</filename>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1494
+msgid "ldap_krb5_init_creds (boolean)"
+msgstr "ldap_krb5_init_creds (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1497
+msgid ""
+"Specifies that the id_provider should init Kerberos credentials (TGT). This "
+"action is performed only if SASL is used and the mechanism selected is "
+"GSSAPI."
+msgstr ""
+"gibt an, dass der »id_provider« Kerberos-Anmeldedaten (TGT) initialisieren "
+"soll. Diese Aktion wird nur durchgeführt, falls SASL benutzt wird und der "
+"ausgewählte Mechnaismus GSSAPI ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1509
+msgid "ldap_krb5_ticket_lifetime (integer)"
+msgstr "ldap_krb5_ticket_lifetime (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1512
+msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
+msgstr ""
+"gibt die Lebensdauer eines TGT in Sekunden an, falls GSSAPI benutzt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1516
+msgid "Default: 86400 (24 hours)"
+msgstr "Voreinstellung: 86400 (24 Stunden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1522 sssd-krb5.5.xml:74
+msgid "krb5_server, krb5_backup_server (string)"
+msgstr "krb5_server, krb5_backup_server (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1525
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled - for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+"gibt die durch Kommata getrennte Liste von IP-Adressen bzw. Rechnernamen von "
+"Kerberos-Servern in der Reihenfolge an, in der sich SSSD mit ihnen verbinden "
+"soll. Weitere Informationen über Ausfallsicherung und Redundanz finden Sie "
+"im Abschnitt »AUSFALLSICHERUNG«. An die Adressen oder Rechnernamen kann eine "
+"optionale Portnummer (der ein Doppelpunkt vorangestellt ist) angehängt "
+"werden. Falls dies leer gelassen wurde, wird die Dienstsuche aktiviert. "
+"Weitere Informationen finden Sie im Abschnitt »DIENSTSUCHE«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1537 sssd-krb5.5.xml:89
+msgid ""
+"When using service discovery for KDC or kpasswd servers, SSSD first searches "
+"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
+"none are found."
+msgstr ""
+"Wenn die Dienstsuche für Schlüsselverwaltungszentralen- (KDC) oder Kpasswd-"
+"Server benutzt wird, durchsucht SSSD zuerst die DNS-Einträge, die_udp als "
+"Protokoll angeben. Falls keine gefunden werden, weicht es auf _tcp aus."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1542 sssd-krb5.5.xml:94
+msgid ""
+"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
+"While the legacy name is recognized for the time being, users are advised to "
+"migrate their config files to use <quote>krb5_server</quote> instead."
+msgstr ""
+"Diese Option hieß in früheren Veröffentlichungen von SSSD »krb5_kdcip«. "
+"Obwohl der alte Name einstweilen noch in Erinnerung ist, wird Anwendern "
+"geraten, ihre Konfigurationsdateien auf die Verwendung von »krb5_server« zu "
+"migrieren."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1551 sssd-ipa.5.xml:260 sssd-krb5.5.xml:103
+msgid "krb5_realm (string)"
+msgstr "krb5_realm (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1554
+msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
+msgstr "gibt den Kerberos-REALM an (für SASL/GSSAPI-Authentifizierung)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1557
+msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
+msgstr ""
+"Voreinstellung: Systemvoreinstellungen, siehe <filename>/etc/krb5.conf</"
+"filename>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1563 sssd-ipa.5.xml:275 sssd-krb5.5.xml:418
+msgid "krb5_canonicalize (boolean)"
+msgstr "krb5_canonicalize (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1566
+msgid ""
+"Specifies if the host principal should be canonicalized when connecting to "
+"LDAP server. This feature is available with MIT Kerberos >= 1.7"
+msgstr ""
+"gibt an, ob der Host Principal beim Verbinden mit einem LDAP-Server in eine "
+"kanonische Form gebracht werden soll. Diese Funktionalität ist mit MIT "
+"Kerberos >= 1.7 verfügbar."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1578
+msgid "ldap_pwd_policy (string)"
+msgstr "ldap_pwd_policy (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1581
+msgid ""
+"Select the policy to evaluate the password expiration on the client side. "
+"The following values are allowed:"
+msgstr ""
+"wählt das Regelwerk, anhand dessen das Client-seitige Erlöschen des "
+"Passworts abgeschätzt werden soll. Die folgenden Werte sind erlaubt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1586
+msgid ""
+"<emphasis>none</emphasis> - No evaluation on the client side. This option "
+"cannot disable server-side password policies."
+msgstr ""
+"<emphasis>none</emphasis> – keine Client-seitige Abschätzung. Diese Option "
+"kann keine Server-seitigen Passwortregelwerke deaktivieren."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1591
+msgid ""
+"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
+"evaluate if the password has expired."
+msgstr ""
+"<emphasis>shadow</emphasis> – benutzt Attribute im Stil von "
+"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry>, um abzuschätzen, ob das Passwort erloschen ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1597
+msgid ""
+"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
+"to determine if the password has expired. Use chpass_provider=krb5 to update "
+"these attributes when the password is changed."
+msgstr ""
+"<emphasis>mit_kerberos</emphasis> – verwendet die von MIT Kerberos benutzten "
+"Attribute, um zu bestimmen, ob das Passwort erloschen ist. Verwenden Sie "
+"»chpass_provider=krb5«, um diese Attribute zu aktualisieren, wenn das "
+"Passwort geändert wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1603
+msgid "Default: none"
+msgstr "Voreinstellung: none"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1609
+msgid "ldap_referrals (boolean)"
+msgstr "ldap_referrals (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1612
+msgid "Specifies whether automatic referral chasing should be enabled."
+msgstr "gibt an, ob automatische Verweisverfolgung aktiviert werden soll."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1616
+msgid ""
+"Please note that sssd only supports referral chasing when it is compiled "
+"with OpenLDAP version 2.4.13 or higher."
+msgstr ""
+"Bitte beachten Sie, dass SSSD nur Verweisverfolgung unterstützt, falls es "
+"mit OpenLDAP Version 2.4.13 oder höher kompiliert wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1621
+msgid ""
+"Chasing referrals may incur a performance penalty in environments that use "
+"them heavily, a notable example is Microsoft Active Directory. If your setup "
+"does not in fact require the use of referrals, setting this option to false "
+"might bring a noticeable performance improvement."
+msgstr ""
+"Verweisverfolgungen können in Umgebungen, die ausgiebig von ihnen Gebrauch "
+"machen, einen Leistungsnachteil erleiden, ein beachtenswertes Beispiel ist "
+"Microsoft Active Directory. Falls ihre Installation Verweisverfolgungen "
+"nicht tatsächlich benötigt, könnte diese Option auf »false« zu setzen eine "
+"merkliche Leistungsverbesserung bringen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1635
+msgid "ldap_dns_service_name (string)"
+msgstr "ldap_dns_service_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1638
+msgid "Specifies the service name to use when service discovery is enabled."
+msgstr ""
+"gibt an, welcher Dienstname bei aktivierter Dienstsuche benutzt werden soll."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1642
+msgid "Default: ldap"
+msgstr "Voreinstellung: ldap"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1648
+msgid "ldap_chpass_dns_service_name (string)"
+msgstr "ldap_chpass_dns_service_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1651
+msgid ""
+"Specifies the service name to use to find an LDAP server which allows "
+"password changes when service discovery is enabled."
+msgstr ""
+"gibt den Dienstnamen an, der zum Finden eines LDAP-Servers benutzt werden "
+"soll, der Passwortänderungen bei aktivierter Dienstsuche ermöglicht."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1656
+msgid "Default: not set, i.e. service discovery is disabled"
+msgstr "Voreinstellung: nicht gesetzt, d.h. Dienstsuche ist deaktiviert"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1662
+msgid "ldap_chpass_update_last_change (bool)"
+msgstr "ldap_chpass_update_last_change (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1665
+msgid ""
+"Specifies whether to update the ldap_user_shadow_last_change attribute with "
+"days since the Epoch after a password change operation."
+msgstr ""
+"gibt an, ob das Attribut »ldap_user_shadow_last_change« nach einer "
+"Passwortänderung mit Unix-Zeit geändert wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1677
+msgid "ldap_access_filter (string)"
+msgstr "ldap_access_filter (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1680
+#, fuzzy
+#| msgid ""
+#| "If using access_provider = ldap and ldap_access_order = filter (default), "
+#| "this option is mandatory. It specifies an LDAP search filter criteria "
+#| "that must be met for the user to be granted access on this host. If "
+#| "access_provider = ldap, ldap_access_order = filter and this option is not "
+#| "set, it will result in all users being denied access. Use "
+#| "access_provider = permit to change this default behavior. Please note "
+#| "that this filter is applied on the LDAP user entry only and thus "
+#| "filtering based on nested groups may not work (e.g. memberOf attribute on "
+#| "AD entries points only to direct parents). If filtering based on nested "
+#| "groups is required, please see <citerefentry> <refentrytitle>sssd-simple</"
+#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
+msgid ""
+"If using access_provider = ldap and ldap_access_order = filter (default), "
+"this option is mandatory. It specifies an LDAP search filter criteria that "
+"must be met for the user to be granted access on this host. If "
+"access_provider = ldap, ldap_access_order = filter and this option is not "
+"set, it will result in all users being denied access. Use access_provider = "
+"permit to change this default behavior."
+msgstr ""
+"Falls access_provider = ldap und ldap_access_order = filter ist "
+"(Voreinstellung), dann ist diese Option obligatorisch. Sie gibt ein "
+"Suchfilterkriterium für LDAP an, dass auf den Benutzer passen muss, damit "
+"diesem Zugriff auf den Host gewährt wird. Falls access_provider = ldap und "
+"ldap_access_order = filter ist und diese Option nicht gesetzt ist, wird "
+"allen Benutzern der Zugriff verweigert. Verwenden Sie access_provider = "
+"permit, um dieses Standardverhalten zu ändern. Bitte beachten Sie, dass "
+"dieser Filter nur auf den LDAP-Benutzereintrag angewendet wird und daher die "
+"auf verschachtelten Gruppen basierende Filterung nicht funktioniert. "
+"Beispielsweise zeigt das Active-Directory-Attribut »memberOf« nur auf die "
+"unmittelbaren Eltern. Falls die Filterung basierend auf verschachtelten "
+"Gruppen erforderlich sein sollte, finden Sie genauere Anweisungen in der "
+"Handbuchseite zu <citerefentry> <refentrytitle>sssd-simple</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
+msgid "Example:"
+msgstr "Beispiel:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:1695
+#, fuzzy, no-wrap
+#| msgid ""
+#| "access_provider = ldap\n"
+#| "ldap_access_filter = (employeeType=admin)\n"
+#| " "
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+" "
+msgstr ""
+"access_provider = ldap\n"
+"ldap_access_filter = (employeeType=admin)\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1699
+#, fuzzy
+#| msgid ""
+#| "This example means that access to this host is restricted to users whose "
+#| "employeeType attribute is set to \"admin\"."
+msgid ""
+"This example means that access to this host is restricted to members of the "
+"\"allowedusers\" group in ldap."
+msgstr ""
+"In diesem Beispiel wird der Zugriff auf diesen Host auf jene Benutzer "
+"beschränkt, deren employeeType-Attribut auf »admin« gesetzt ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1704
+msgid ""
+"Offline caching for this feature is limited to determining whether the "
+"user's last online login was granted access permission. If they were granted "
+"access during their last login, they will continue to be granted access "
+"while offline and vice-versa."
+msgstr ""
+"Die Offline-Zwischenspeicherung ist darauf beschränkt festzulegen, ob bei "
+"der letzten Online-Anmeldung des Benutzers Zugriffsrechte gewährt wurden. "
+"Falls ja, wird weiterhin offline Zugriff gegeben und umgekehrt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1712 sssd-ldap.5.xml:1762
+msgid "Default: Empty"
+msgstr "Voreinstellung: leer"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1718
+msgid "ldap_account_expire_policy (string)"
+msgstr "ldap_account_expire_policy (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1721
+msgid ""
+"With this option a client side evaluation of access control attributes can "
+"be enabled."
+msgstr ""
+"Mit dieser Option kann eine Client-seitige Abschätzung der "
+"Zugriffssteuerungsattribute aktiviert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1725
+msgid ""
+"Please note that it is always recommended to use server side access control, "
+"i.e. the LDAP server should deny the bind request with a suitable error code "
+"even if the password is correct."
+msgstr ""
+"Bitte beachten Sie, dass die Server-seitige Zugriffssteuerung generell "
+"empfohlen wird, d.h. der LDAP-Server sollte die Bind-Abfrage sogar dann mit "
+"einem geeigneten Fehlercode zurückweisen, wenn das Passwort korrekt ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1732
+msgid "The following values are allowed:"
+msgstr "Die folgenden Werte sind erlaubt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1735
+msgid ""
+"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
+"determine if the account is expired."
+msgstr ""
+"<emphasis>shadow</emphasis>: verwendet den Wert von "
+"»ldap_user_shadow_expire«, um zu bestimmen, ob das Konto abgelaufen ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1740
+msgid ""
+"<emphasis>ad</emphasis>: use the value of the 32bit field "
+"ldap_user_ad_user_account_control and allow access if the second bit is not "
+"set. If the attribute is missing access is granted. Also the expiration time "
+"of the account is checked."
+msgstr ""
+"<emphasis>ad</emphasis>: verwendet den Wert des 32-Bit-Felds "
+"»ldap_user_ad_user_account_control« und ermöglicht den Zugriff, falls das "
+"zweite Bit nicht gesetzt ist. Falls das Attribut fehlt, wird Zugriff "
+"gewährt. Außerdem wird die Ablaufzeit des Kontos geprüft."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1747
+msgid ""
+"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
+"emphasis>: use the value of ldap_ns_account_lock to check if access is "
+"allowed or not."
+msgstr ""
+"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
+"emphasis>: verwenden den Wert von »ldap_ns_account_lock«, um zu prüfen, ob "
+"Zugriff erlaubt wird oder nicht."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1753
+msgid ""
+"<emphasis>nds</emphasis>: the values of "
+"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
+"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
+"If both attributes are missing access is granted."
+msgstr ""
+"<emphasis>nds</emphasis>: Die Werte von "
+"»ldap_user_nds_login_allowed_time_map«, »ldap_user_nds_login_disabled« und "
+"»ldap_user_nds_login_expiration_time« werden benutzt, um zu überprüfen, ob "
+"Zugriff gewährt wird. Falls diese Attribute fehlen, wird Zugriff erteilt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1768
+msgid "ldap_access_order (string)"
+msgstr "ldap_access_order (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1771
+msgid "Comma separated list of access control options. Allowed values are:"
+msgstr ""
+"durch Kommata getrennte Liste von Zugriffssteuerungsoptionen. Folgende Werte "
+"sind erlaubt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1775
+msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
+msgstr "<emphasis>filter</emphasis>: verwendet »ldap_access_filter«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1778
+msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
+msgstr "<emphasis>expire</emphasis>: verwendet »ldap_account_expire_policy«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1782
+msgid ""
+"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
+"to determine access"
+msgstr ""
+"<emphasis>authorized_service</emphasis>: verwendet das Attribut "
+"»authorizedService«, um zu bestimmen, ob Zugriff gewährt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1787
+msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
+msgstr ""
+"<emphasis>host</emphasis>: verwendet das Attribut »host«, um zu bestimmen, "
+"ob Zugriff gewährt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1791
+msgid "Default: filter"
+msgstr "Voreinstellung: filter"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1794
+msgid ""
+"Please note that it is a configuration error if a value is used more than "
+"once."
+msgstr ""
+"Bitte beachten Sie, dass es ein Konfigurationsfehler ist, falls ein Wert "
+"mehr als einmal benutzt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1801
+msgid "ldap_deref (string)"
+msgstr "ldap_deref (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1804
+msgid ""
+"Specifies how alias dereferencing is done when performing a search. The "
+"following options are allowed:"
+msgstr ""
+"gibt an, wie Alias-Dereferenzierung bei einer Suche erledigt wird. Die "
+"folgenden Optionen sind erlaubt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1809
+msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
+msgstr "<emphasis>never</emphasis>: Alias werden nie dereferenziert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1813
+msgid ""
+"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
+"the base object, but not in locating the base object of the search."
+msgstr ""
+"<emphasis>searching</emphasis>: Alias werden auf Unterebenen des "
+"Basisobjekts dereferenziert, nicht jedoch beim Orten des Basisobjekts der "
+"Suche."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1818
+msgid ""
+"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
+"the base object of the search."
+msgstr ""
+"<emphasis>finding</emphasis>: Alias werden nur beim Orten des Basisobjekts "
+"der Suche dereferenziert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1823
+msgid ""
+"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
+"in locating the base object of the search."
+msgstr ""
+"<emphasis>always</emphasis>: Alias werden sowohl bei der Suche als auch beim "
+"Orten des Basisobjekts der Suche dereferenziert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1828
+msgid ""
+"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
+"client libraries)"
+msgstr ""
+"Voreinstellung: leer (Dies wird durch LDAP-Client-Bibliotheken wie "
+"<emphasis>never</emphasis> gehandhabt.)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1836
+msgid "ldap_rfc2307_fallback_to_local_users (boolean)"
+msgstr "ldap_rfc2307_fallback_to_local_users (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1839
+msgid ""
+"Allows to retain local users as members of an LDAP group for servers that "
+"use the RFC2307 schema."
+msgstr ""
+"ermöglich, lokale Anwender als Mitglieder einer LDAP-Gruppe für Server "
+"beizubehalten, die das Schema RFC2307 benutzen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1843
+msgid ""
+"In some environments where the RFC2307 schema is used, local users are made "
+"members of LDAP groups by adding their names to the memberUid attribute. "
+"The self-consistency of the domain is compromised when this is done, so SSSD "
+"would normally remove the \"missing\" users from the cached group "
+"memberships as soon as nsswitch tries to fetch information about the user "
+"via getpw*() or initgroups() calls."
+msgstr ""
+"In einigen Umgebungen, in denen das Schema RFC2307 verwendet wird, werden "
+"lokale Benutzer zu Mitgliedern einer LDAP-Gruppe gemacht, indem ihre Namen "
+"dem Attribut »memberUid« hinzugefügt werden. Die eigene Stimmigkeit der "
+"Domain wird dabei kompromittiert, daher würde SSSD normalerweise »fehlende« "
+"Anwender aus den zwischengespeicherten Gruppenmitgliedschaften entfernen, "
+"sobald Nsswitch versucht, Informationen über den Anwender durch Aufrufen von "
+"getpw*() oder initgroups() abzurufen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1854
+msgid ""
+"This option falls back to checking if local users are referenced, and caches "
+"them so that later initgroups() calls will augment the local users with the "
+"additional LDAP groups."
+msgstr ""
+"Diese Option greift auf das Prüfen zurück, ob auf lokale Benutzer Bezug "
+"genommen wird und speichert sie, so dass spätere Aufrufe von »initgroups() "
+"die lokalen Benutzer um zusätzliche LDAP-Gruppen erweitert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:51
+msgid ""
+"All of the common configuration options that apply to SSSD domains also "
+"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
+"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for full details. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Alle häufigen Konfigurationsoptionen, die für SSSD-Domains gelten, gelten "
+"auch für LDAP-Domains. Umfassende Einzelheiten finden Sie im Abschnitt "
+"»DOMAIN-ABSCHNITTE« der Handbuchseite <citerefentry> <refentrytitle>sssd."
+"conf</refentrytitle> <manvolnum>5</manvolnum> </citerefentry>. <placeholder "
+"type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:1870
+msgid "SUDO OPTIONS"
+msgstr "SUDO-OPTIONEN"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1874
+msgid "ldap_sudorule_object_class (string)"
+msgstr "ldap_sudorule_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1877
+msgid "The object class of a sudo rule entry in LDAP."
+msgstr "die Objektklasse eines Sudo-Regeleintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1880
+msgid "Default: sudoRole"
+msgstr "Voreinstellung: sudoRole"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1886
+msgid "ldap_sudorule_name (string)"
+msgstr "ldap_sudorule_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1889
+msgid "The LDAP attribute that corresponds to the sudo rule name."
+msgstr "das LDAP-Attribut, das dem Namen der Sudo-Regel entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1899
+msgid "ldap_sudorule_command (string)"
+msgstr "ldap_sudorule_command (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1902
+msgid "The LDAP attribute that corresponds to the command name."
+msgstr "das LDAP-Attribut, das dem Namen des Befehls entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1906
+msgid "Default: sudoCommand"
+msgstr "Voreinstellung: sudoCommand"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1912
+msgid "ldap_sudorule_host (string)"
+msgstr "ldap_sudorule_host (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1915
+msgid ""
+"The LDAP attribute that corresponds to the host name (or host IP address, "
+"host IP network, or host netgroup)"
+msgstr ""
+"das LDAP-Attribut, das dem Rechnernamen (oder der IP-Adresse, dem IP-"
+"Netzwerk oder des Netzwerkgruppe des Rechners) entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1920
+msgid "Default: sudoHost"
+msgstr "Voreinstellung: sudoHost"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1926
+msgid "ldap_sudorule_user (string)"
+msgstr "ldap_sudorule_user (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1929
+msgid ""
+"The LDAP attribute that corresponds to the user name (or UID, group name or "
+"user's netgroup)"
+msgstr ""
+"das LDAP-Attribut, das dem Benutzernamen (oder der UID, dem Gruppennamen "
+"oder der Netzwerkgruppe des Benutzers) entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1933
+msgid "Default: sudoUser"
+msgstr "Voreinstellung: sudoUser"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1939
+msgid "ldap_sudorule_option (string)"
+msgstr "ldap_sudorule_option (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1942
+msgid "The LDAP attribute that corresponds to the sudo options."
+msgstr "das LDAP-Attribut, das den Sudo-Optionen entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1946
+msgid "Default: sudoOption"
+msgstr "Voreinstellung: sudoOption"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1952
+msgid "ldap_sudorule_runasuser (string)"
+msgstr "ldap_sudorule_runasuser (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1955
+msgid ""
+"The LDAP attribute that corresponds to the user name that commands may be "
+"run as."
+msgstr ""
+"das LDAP-Attribut, das dem Benutzernamen entspricht, unter dem Befehle "
+"ausgeführt werden können"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1959
+msgid "Default: sudoRunAsUser"
+msgstr "Voreinstellung: sudoRunAsUser"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1965
+msgid "ldap_sudorule_runasgroup (string)"
+msgstr "ldap_sudorule_runasgroup (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1968
+msgid ""
+"The LDAP attribute that corresponds to the group name or group GID that "
+"commands may be run as."
+msgstr ""
+"das LDAP-Attribut, das dem Gruppennamen oder der GID der Gruppe entspricht, "
+"worunter Befehle ausgeführt werden können"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1972
+msgid "Default: sudoRunAsGroup"
+msgstr "Voreinstellung: sudoRunAsGroup"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1978
+msgid "ldap_sudorule_notbefore (string)"
+msgstr "ldap_sudorule_notbefore (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1981
+msgid ""
+"The LDAP attribute that corresponds to the start date/time for when the sudo "
+"rule is valid."
+msgstr ""
+"das LDAP-Attribut, das dem Startdatum und der Startzeit entpricht, wann die "
+"Sudo-Regel gültig wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1985
+msgid "Default: sudoNotBefore"
+msgstr "Voreinstellung: sudoNotBefore"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1991
+msgid "ldap_sudorule_notafter (string)"
+msgstr "ldap_sudorule_notafter (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1994
+msgid ""
+"The LDAP attribute that corresponds to the expiration date/time, after which "
+"the sudo rule will no longer be valid."
+msgstr ""
+"das LDAP-Attribut, das dem Ablaufdatum und der Ablaufzeit entspricht, nach "
+"der die Sudo-Regel nicht länger gültig ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1999
+msgid "Default: sudoNotAfter"
+msgstr "Voreinstellung: sudoNotAfter"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2005
+msgid "ldap_sudorule_order (string)"
+msgstr "ldap_sudorule_order (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2008
+msgid "The LDAP attribute that corresponds to the ordering index of the rule."
+msgstr "das LDAP-Attribut, das dem Reihenfolgenindex der Regel entspricht"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2012
+msgid "Default: sudoOrder"
+msgstr "Voreinstellung: sudoOrder"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2018
+msgid "ldap_sudo_full_refresh_interval (integer)"
+msgstr "ldap_sudo_full_refresh_interval (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2021
+msgid ""
+"How many seconds SSSD will wait between executing a full refresh of sudo "
+"rules (which downloads all rules that are stored on the server)."
+msgstr ""
+"wie viele Sekunden SSSD zwischen einer vollständigen Aktualisierung von Sudo-"
+"Regeln warten wird (wodurch alle auf dem Server gespeicherten Regeln "
+"heruntergeladen werden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2026
+msgid ""
+"The value must be greater than <emphasis>ldap_sudo_smart_refresh_interval </"
+"emphasis>"
+msgstr ""
+"Der Wert muss größer als <emphasis>ldap_sudo_smart_refresh_interval</"
+"emphasis> sein."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2031
+msgid "Default: 21600 (6 hours)"
+msgstr "Voreinstellung: 21600 (6 Stunden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2037
+msgid "ldap_sudo_smart_refresh_interval (integer)"
+msgstr "ldap_sudo_smart_refresh_interval (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2040
+msgid ""
+"How many seconds SSSD has to wait before executing a smart refresh of sudo "
+"rules (which downloads all rules that have USN higher than the highest USN "
+"of cached rules)."
+msgstr ""
+"wie viele Sekunden SSSD warten soll, bevor ein kluges Aktualisieren der Sudo-"
+"Regeln ausgeführt wird (wodurch alle Regeln, die eine höhere USN als die "
+"höchste USN der zwischengespeicherten Regeln haben, heruntergeladen werden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2046
+msgid ""
+"If USN attributes are not supported by the server, the modifyTimestamp "
+"attribute is used instead."
+msgstr ""
+"Falls vom Server keine USN-Attribute unterstützt werden, wird stattdessen "
+"das Attribut »modifyTimestamp« benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2056
+msgid "ldap_sudo_use_host_filter (boolean)"
+msgstr "ldap_sudo_use_host_filter (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2059
+msgid ""
+"If true, SSSD will download only rules that are applicable to this machine "
+"(using the IPv4 or IPv6 host/network addresses and hostnames)."
+msgstr ""
+"Falls dies auf »true« gesetzt ist, wird SSSD nur die Regeln herunterladen, "
+"die auf diese Maschine angewandt werden können (mittels der IPv4- oder IPv6-"
+"Netzwerkadressen und Rechnernamen)."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2070
+msgid "ldap_sudo_hostnames (string)"
+msgstr "ldap_sudo_hostnames (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2073
+msgid ""
+"Space separated list of hostnames or fully qualified domain names that "
+"should be used to filter the rules."
+msgstr ""
+"durch Leerzeichen getrennte Listen von Rechnernamen oder voll qualifizierten "
+"Domain-Namen, die zum Filtern der Regeln benutzt werden sollen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2078
+msgid ""
+"If this option is empty, SSSD will try to discover the hostname and the "
+"fully qualified domain name automatically."
+msgstr ""
+"Falls diese Option leer ist, wird SSSD versuchen, den Rechnernamen und den "
+"voll qualifizierten Domain-Namen automatisch herauszufinden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2083 sssd-ldap.5.xml:2106 sssd-ldap.5.xml:2124
+#: sssd-ldap.5.xml:2142
+msgid ""
+"If <emphasis>ldap_sudo_use_host_filter</emphasis> is <emphasis>false</"
+"emphasis> then this option has no effect."
+msgstr ""
+"Falls <emphasis>ldap_sudo_use_host_filter</emphasis> <emphasis>false</"
+"emphasis> ist, hat diese Option keine Auswirkungen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2088 sssd-ldap.5.xml:2111
+msgid "Default: not specified"
+msgstr "Voreinstellung: nicht angegeben"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2094
+msgid "ldap_sudo_ip (string)"
+msgstr "ldap_sudo_ip (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2097
+msgid ""
+"Space separated list of IPv4 or IPv6 host/network addresses that should be "
+"used to filter the rules."
+msgstr ""
+"durch Kommata getrennte Liste von IPv4- oder IPv6-Rechner- beziehungsweise "
+"Netzwerkadressen, die zum Filtern der Regeln benutzt werden sollen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2102
+msgid ""
+"If this option is empty, SSSD will try to discover the addresses "
+"automatically."
+msgstr ""
+"Falls diese Option leer ist, wird SSSD versuchen, die Adressen automatisch "
+"herauszufinden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2117
+msgid "ldap_sudo_include_netgroups (boolean)"
+msgstr "ldap_sudo_include_netgroups (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2120
+msgid ""
+"If true then SSSD will download every rule that contains a netgroup in "
+"sudoHost attribute."
+msgstr ""
+"Falls dies auf »true« gesetzt ist, wird SSSD jede Regel herunterladen, die "
+"eine Netzgruppe im Attribut »sudoHost« enthält."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2135
+msgid "ldap_sudo_include_regexp (boolean)"
+msgstr "ldap_sudo_include_regexp (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2138
+msgid ""
+"If true then SSSD will download every rule that contains a wildcard in "
+"sudoHost attribute."
+msgstr ""
+"Falls dies auf »true« gesetzt ist, wird SSSD jede Regel herunterladen, die "
+"einen Platzhalter im Attribut »sudoHost« enthält."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:1872
+msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2154
+msgid ""
+"This manual page only describes attribute name mapping. For detailed "
+"explanation of sudo related attribute semantics, see <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+"Diese Handbuchseite beschreibt nur das Abbilden von Attributnamen. Eine "
+"umfassende Erklärung der Sudo-bezogenen Attributsemantik finden Sie unter "
+"<citerefentry> <refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2164
+msgid "AUTOFS OPTIONS"
+msgstr "AUTOFS-OPTIONEN"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2166
+msgid ""
+"Please note that the default values correspond to the default schema which "
+"is RFC2307."
+msgstr ""
+"Bitte beachten Sie, dass die Standardwerte dem Standardschema RFC2307 "
+"entsprechen. "
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2172
+msgid "ldap_autofs_map_object_class (string)"
+msgstr "ldap_autofs_map_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2175 sssd-ldap.5.xml:2201
+msgid "The object class of an automount map entry in LDAP."
+msgstr "die Objektklasse eines Automount-Abbildungseintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2178 sssd-ldap.5.xml:2205
+msgid "Default: automountMap"
+msgstr "Voreinstellung: automountMap"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2185
+msgid "ldap_autofs_map_name (string)"
+msgstr "ldap_autofs_map_name (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2188
+msgid "The name of an automount map entry in LDAP."
+msgstr "der Name eines Automount-Abbildungseintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2191
+msgid "Default: ou"
+msgstr "Voreinstellung: ou"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2198
+msgid "ldap_autofs_entry_object_class (string)"
+msgstr "ldap_autofs_entry_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2212
+msgid "ldap_autofs_entry_key (string)"
+msgstr "ldap_autofs_entry_key (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2215 sssd-ldap.5.xml:2229
+msgid ""
+"The key of an automount entry in LDAP. The entry usually corresponds to a "
+"mount point."
+msgstr ""
+"der Schlüssel eines Automount-Eintrags in LDAP. Normalerweise entspricht der "
+"Eintrag einem Einhängepunkt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2226
+msgid "ldap_autofs_entry_value (string)"
+msgstr "ldap_autofs_entry_value (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2233
+msgid "Default: automountInformation"
+msgstr "Voreinstellung: automountInformation"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2170
+#, fuzzy
+#| msgid ""
+#| "<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+#| "\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+#| "<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+#| "\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
+msgid ""
+"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+"\"variablelist\" id=\"4\"/>"
+msgstr ""
+"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+"\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2243
+msgid "ADVANCED OPTIONS"
+msgstr "ERWEITERTE OPTIONEN"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2250
+msgid "ldap_netgroup_search_base (string)"
+msgstr "ldap_netgroup_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2255
+msgid "ldap_user_search_base (string)"
+msgstr "ldap_user_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2260
+msgid "ldap_group_search_base (string)"
+msgstr "ldap_group_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
+msgid "ldap_user_search_filter (string)"
+msgstr "ldap_user_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2268
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict user searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2272
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_user_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:2282
+#, no-wrap
+msgid ""
+" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2285
+msgid ""
+"This filter would restrict user searches to users that have their shell set "
+"to /bin/tcsh."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
+msgid "ldap_group_search_filter (string)"
+msgstr "ldap_group_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2295
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict group searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2299
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_group_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2309
+msgid "ldap_sudo_search_base (string)"
+msgstr "ldap_sudo_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2314
+msgid "ldap_autofs_search_base (string)"
+msgstr "ldap_autofs_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2245
+msgid ""
+"These options are supported by LDAP domains, but they should be used with "
+"caution. Please include them in your configuration only if you know what you "
+"are doing. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Diese Optionen werden durch LDAP-Domains unterstützt, sie sollten aber mit "
+"Vorsicht benutzt werden. Bitte fügen Sie sie nur in Ihre Konfiguration ein, "
+"falls Sie wissen, was Sie tun. <placeholder type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2331
+msgid ""
+"The following example assumes that SSSD is correctly configured and LDAP is "
+"set to one of the domains in the <replaceable>[domains]</replaceable> "
+"section."
+msgstr ""
+"Das folgende Beispiel geht davon aus, dass SSSD korrekt konfiguriert ist und "
+"LDAP auf eine der Domains im Abschnitt <replaceable>[domains]</replaceable> "
+"gesetzt ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ldap.5.xml:2337
+#, no-wrap
+msgid ""
+" [domain/LDAP]\n"
+" id_provider = ldap\n"
+" auth_provider = ldap\n"
+" ldap_uri = ldap://ldap.mydomain.org\n"
+" ldap_search_base = dc=mydomain,dc=org\n"
+" ldap_tls_reqcert = demand\n"
+" cache_credentials = true\n"
+msgstr ""
+" [domain/LDAP]\n"
+" id_provider = ldap\n"
+" auth_provider = ldap\n"
+" ldap_uri = ldap://ldap.meinedomain.org\n"
+" ldap_search_base = dc=meinedomain,dc=org\n"
+" ldap_tls_reqcert = demand\n"
+" cache_credentials = true\n"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: sssd-ldap.5.xml:2336 sssd-simple.5.xml:139 sssd-ipa.5.xml:620
+#: sssd-ad.5.xml:237 sssd-sudo.5.xml:56 sssd-sudo.5.xml:78 sssd-krb5.5.xml:450
+#: include/ldap_id_mapping.xml:63
+msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr "<placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2349 sssd_krb5_locator_plugin.8.xml:61 sssd-ad.5.xml:252
+#: sssd.8.xml:191 sss_seed.8.xml:163
+msgid "NOTES"
+msgstr "ANMERKUNGEN"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2351
+msgid ""
+"The descriptions of some of the configuration options in this manual page "
+"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
+"distribution."
+msgstr ""
+"Die Beschreibungen einiger Konfigurationsoptionen auf dieser Handbuchseite "
+"basieren auf der Handbuchseite <citerefentry> <refentrytitle>ldap.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> der Distribution "
+"OpenLDAP 2.4."
+
+#. type: Content of: <refentryinfo>
+#: pam_sss.8.xml:8 include/upstream.xml:2
+msgid ""
+"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
+"fedorahosted.org/sssd</orgname>"
+msgstr ""
+"<productname>SSSD</productname> <orgname>Die SSSD-Originalautoren – http://"
+"fedorahosted.org/sssd</orgname>"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: pam_sss.8.xml:13 pam_sss.8.xml:18
+msgid "pam_sss"
+msgstr "pam_sss"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: pam_sss.8.xml:19
+msgid "PAM module for SSSD"
+msgstr "PAM-Modul für SSSD"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: pam_sss.8.xml:24
+#, fuzzy
+#| msgid ""
+#| "<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</"
+#| "replaceable> </arg>"
+msgid ""
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg>"
+msgstr ""
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</replaceable> </"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:45
+msgid ""
+"<command>pam_sss.so</command> is the PAM interface to the System Security "
+"Services daemon (SSSD). Errors and results are logged through "
+"<command>syslog(3)</command> with the LOG_AUTHPRIV facility."
+msgstr ""
+"<command>pam_sss.so</command> ist die PAM-Schnittstelle des "
+"Systemsicherheitsdienst-Daemons (»System Security Services daemon«/SSSD). "
+"Fehler und Ergebnisse werden durch <command>syslog(3)</command> mit der "
+"Fertigkeit LOG_AUTHPRIV protokolliert."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:55
+msgid "<option>quiet</option>"
+msgstr "<option>quiet</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:58
+msgid "Suppress log messages for unknown users."
+msgstr "unterdrückt Protokollnachrichten für unbekannte Benutzer"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:63
+msgid "<option>forward_pass</option>"
+msgstr "<option>forward_pass</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:66
+msgid ""
+"If <option>forward_pass</option> is set the entered password is put on the "
+"stack for other PAM modules to use."
+msgstr ""
+"Falls <option>forward_pass</option> gesetzt ist, wird das eingegebene "
+"Passwort in den Stapelverabeitungsspeicher gelegt, damit andere PAM-Module "
+"es nutzen können."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:73
+msgid "<option>use_first_pass</option>"
+msgstr "<option>use_first_pass</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:76
+msgid ""
+"The argument use_first_pass forces the module to use a previous stacked "
+"modules password and will never prompt the user - if no password is "
+"available or the password is not appropriate, the user will be denied access."
+msgstr ""
+"Das Argument »use_first_pass« zwingt das Modul ein vorher im "
+"Stapelverabeitungsspeicher abgelegtes Passwort zu benutzen. Es wird den "
+"Anwender nie fragen. Falls kein Passwort verfügbar oder das Passwort "
+"ungeeignet ist, wird dem Benutzer der Zugriff verwehrt."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:84
+msgid "<option>use_authtok</option>"
+msgstr "<option>use_authtok</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:87
+msgid ""
+"When password changing enforce the module to set the new password to the one "
+"provided by a previously stacked password module."
+msgstr ""
+"Wenn das Passwort geändert wird, erzwingt das Modul, dass das neue Passwort "
+"von einem vorher im Stapelverabeitungsspeicher abgelegten Passwortmodul "
+"bereitgestellt wird."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:94
+msgid "<option>retry=N</option>"
+msgstr "<option>retry=N</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:97
+msgid ""
+"If specified the user is asked another N times for a password if "
+"authentication fails. Default is 0."
+msgstr ""
+"Ist dies angegeben, wird der Benutzer weitere N mal nach einem Passwort "
+"gefragt, falls die Authentifizierung fehlschlägt. Voreinstellung ist 0."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:99
+msgid ""
+"Please note that this option might not work as expected if the application "
+"calling PAM handles the user dialog on its own. A typical example is "
+"<command>sshd</command> with <option>PasswordAuthentication</option>."
+msgstr ""
+"Bitte beachten Sie, dass diese Option möglicherweise nicht wie erwartet "
+"funktioniert, falls eine Anwendung, die PAM aufruft, den Benutzerdialog "
+"selbst abwickelt. Ein typisches Beispiel ist <command>sshd</command> mit "
+"<option>PasswordAuthentication</option>."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:110
+msgid "MODULE TYPES PROVIDED"
+msgstr "BEREITGESTELLTE MODULTYPEN"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:111
+msgid ""
+"All module types (<option>account</option>, <option>auth</option>, "
+"<option>password</option> and <option>session</option>) are provided."
+msgstr ""
+"Alle Modultypen (<option>account</option>, <option>auth</option>, "
+"<option>password</option> und <option>session</option>) werden "
+"bereitgestellt."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:117
+msgid "FILES"
+msgstr "DATEIEN"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:118
+msgid ""
+"If a password reset by root fails, because the corresponding SSSD provider "
+"does not support password resets, an individual message can be displayed. "
+"This message can e.g. contain instructions about how to reset a password."
+msgstr ""
+"Falls ein Zurücksetzen des Passworts durch Root fehlschlägt, weil der "
+"zugehörige SSSD-Anbieter das Zurücksetzen von Passwörtern nicht unterstützt, "
+"kann eine individuelle Nachricht angezeigt werden. Diese Nachricht kann z.B. "
+"Anweisungen enthalten, wie ein Passwort zurückgesetzt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:123
+msgid ""
+"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
+"filename> where LOC stands for a locale string returned by <citerefentry> "
+"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
+"citerefentry>. If there is no matching file the content of "
+"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
+"the owner of the files and only root may have read and write permissions "
+"while all other users must have only read permissions."
+msgstr ""
+"Die Nachricht wird aus der Datei <filename>pam_sss_pw_reset_message.LOC</"
+"filename> gelesen, wobei LOC für eine durch <citerefentry> "
+"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
+"citerefentry> zurückgegebene Zeichenkette steht. Falls dort keine passende "
+"Datei ist, wird der Inhalt von <filename>pam_sss_pw_reset_message.txt</"
+"filename> angezeigt. Root muss der Besitzer der Dateien sein und nur Root "
+"kann Lese- und Schreibrechte haben, während alle anderen Anwender nur "
+"Leserechte haben dürfen."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:133
+msgid ""
+"These files are searched in the directory <filename>/etc/sssd/customize/"
+"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
+"displayed."
+msgstr ""
+"Diese Dateien werden im Verzeichnis <filename>/etc/sssd/customize/"
+"DOMAIN_NAME/</filename> gesucht. Falls keine passende Datei vorhanden ist, "
+"wird eine allgemeine Nachricht angezeigt."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
+msgid "sssd_krb5_locator_plugin"
+msgstr "sssd_krb5_locator_plugin"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:22
+#, fuzzy
+#| msgid ""
+#| "The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> "
+#| "is used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+#| "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the "
+#| "Kerberos libraries what Realm and which KDC to use. Typically this is "
+#| "done in <citerefentry> <refentrytitle>krb5.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> which is always read by the "
+#| "Kerberos libraries. To simplify the configuration the Realm and the KDC "
+#| "can be defined in <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> as described in <citerefentry> "
+#| "<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+#| "citerefentry>"
+msgid ""
+"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
+"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
+"libraries what Realm and which KDC to use. Typically this is done in "
+"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
+"To simplify the configuration the Realm and the KDC can be defined in "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> as described in <citerefentry> "
+"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+"Das Kerberos Locator-Plugin <command>sssd_krb5_locator_plugin</command> wird "
+"vom Kerberos-Anbieter von <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> verwendet, um für die Kerberos-"
+"Bibliotheken festzulegen, welcher Realm und KDC verwendet werden soll. "
+"Typischerweise geschieht dies in der Datei <citerefentry> "
+"<refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>, die immer von den Kerberos-Bibliotheken gelesen wird. Um die "
+"Konfiguration zu vereinfachen, können Realm und KDC in der Datei "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> definiert werden, so wie es in der Handbuchseite "
+"zu <citerefentry> <refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> beschrieben ist."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:48
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry> puts the Realm and the name or IP address of the KDC into "
+"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively. "
+"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
+"libraries it reads and evaluates these variables and returns them to the "
+"libraries."
+msgstr ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry> legt den Realm und den Namen oder die IP-Adresse der "
+"Schlüsselverwaltungszentrale (KDC) in den Umgebungsvariablen SSSD_KRB5_REALM "
+"beziehungsweise SSSD_KRB5_KDC ab. Wenn <command>sssd_krb5_locator_plugin</"
+"command> durch die Kerberos-Bibliotheken aufgerufen wird, liest es diese "
+"Variablen, wertet sie aus und gibt sie an die Bibliotheken zurück."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:63
+msgid ""
+"Not all Kerberos implementations support the use of plugins. If "
+"<command>sssd_krb5_locator_plugin</command> is not available on your system "
+"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
+msgstr ""
+"Nicht alle Kerberos-Implementierungen unterstützen die Verwendung von "
+"Erweiterungen. Falls <command>sssd_krb5_locator_plugin</command> nicht auf "
+"Ihrem System vorhanden ist, müssen Sie /etc/krb5.conf bearbeiten, damit sie "
+"Ihre Kerberos-Einrichtung widerspiegelt."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:69
+msgid ""
+"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
+"debug messages will be sent to stderr."
+msgstr ""
+"Falls die Umgebungsvariable SSSD_KRB5_LOCATOR_DEBUG auf irgendeinen Wert "
+"gesetzt ist, werden Debug-Nachrichten an »stderr« gesandt."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
+msgid "sssd-simple"
+msgstr "sssd-simple"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-simple.5.xml:17
+msgid "the configuration file for SSSD's 'simple' access-control provider"
+msgstr ""
+"die Konfigurationsdatei für den »einfachen« Zugriffssteuerungsanbieter von "
+"SSSD"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:24
+msgid ""
+"This manual page describes the configuration of the simple access-control "
+"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry>. For a detailed syntax reference, "
+"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page."
+msgstr ""
+"Diese Handbuchseite beschreibt die Konfiguration des einfachen "
+"Zugriffssteuerungsanbieters für <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>. Eine ausführliche "
+"Syntax-Referenz finden Sie im Abschnitt »DATEIFORMAT« der Handbuchseite "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:38
+msgid ""
+"The simple access provider grants or denies access based on an access or "
+"deny list of user or group names. The following rules apply:"
+msgstr ""
+"Der einfache Zugriffsanbieter gewährt oder verweigert den Zugriff auf Basis "
+"einer Zugriffs- oder Verbotsliste von Benutzer- oder Gruppennamen. Es gelten "
+"die folgenden Regeln:"
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:43
+msgid "If all lists are empty, access is granted"
+msgstr "Falls alle Listen leer sind, wird Zugriff gewährt."
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:47
+msgid ""
+"If any list is provided, the order of evaluation is allow,deny. This means "
+"that any matching deny rule will supersede any matched allow rule."
+msgstr ""
+"Falls irgendeine Liste bereitgestellt wird, ist die Reihenfolge der "
+"Auswertung »erlauben,verbieten«. Das heißt, dass eine passende verbietende "
+"Regeln jede passende erlaubende Regel ersetzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:54
+msgid ""
+"If either or both \"allow\" lists are provided, all users are denied unless "
+"they appear in the list."
+msgstr ""
+"Falls eine oder beide »Erlaubnislisten« bereitgestellt werden, ist der "
+"Zugriff allen Benutzern verboten, sofern sie nicht auf der Liste erscheinen."
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:60
+msgid ""
+"If only \"deny\" lists are provided, all users are granted access unless "
+"they appear in the list."
+msgstr ""
+"Falls nur »Verbotslisten« bereitgestellt werden, wird der Zugriff allen "
+"Benutzern gewährt, sofern sie nicht auf der Liste stehen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:78
+msgid "simple_allow_users (string)"
+msgstr "simple_allow_users (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:81
+msgid "Comma separated list of users who are allowed to log in."
+msgstr "Durch Kommata getrennte Liste von Benutzern, die sich anmelden dürfen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:88
+msgid "simple_deny_users (string)"
+msgstr "simple_deny_users (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:91
+msgid "Comma separated list of users who are explicitly denied access."
+msgstr ""
+"Durch Kommata getrennte Liste von Benutzern, denen der Zugriff explizit "
+"verwehrt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:97
+msgid "simple_allow_groups (string)"
+msgstr "simple_allow_groups (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:100
+msgid ""
+"Comma separated list of groups that are allowed to log in. This applies only "
+"to groups within this SSSD domain. Local groups are not evaluated."
+msgstr ""
+"Durch Kommata getrennte Liste von Gruppen, die sich anmelden dürfen. Dies "
+"gilt nur für Gruppen innerhalb dieser SSSD-Domain. Lokale Gruppen werden "
+"nicht ausgewertet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:108
+msgid "simple_deny_groups (string)"
+msgstr "simple_deny_groups (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:111
+msgid ""
+"Comma separated list of groups that are explicitly denied access. This "
+"applies only to groups within this SSSD domain. Local groups are not "
+"evaluated."
+msgstr ""
+"Durch Kommata getrennte Liste von Gruppen, denen der Zugriff explizit "
+"verwehrt wird. Dies gilt nur für Gruppen innerhalb dieser SSSD-Domain. "
+"Lokale Gruppen werden nicht ausgewertet."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:70 sssd-ipa.5.xml:71 sssd-ad.5.xml:76
+msgid ""
+"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Einzelheiten über die Konfiguration einer SSSD-Domain finden Sie im "
+"Abschnitt »DOMAIN-ABSCHNITTE« der Handbuchseite <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>. <placeholder type=\"variablelist\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:120
+msgid ""
+"Specifying no values for any of the lists is equivalent to skipping it "
+"entirely. Beware of this while generating parameters for the simple provider "
+"using automated scripts."
+msgstr ""
+"Keine Werte für eine der Listen anzugeben ist so, als ob sie ganz "
+"übersprungen würde. Hüten Sie sich davor, solange Parameter für den "
+"einfachen Anbieter mittels automatischer Skripte erzeugt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:125
+msgid ""
+"Please note that it is an configuration error if both, simple_allow_users "
+"and simple_deny_users, are defined."
+msgstr ""
+"Bitte beachten Sie, das es ein Konfigurationsfehler ist, wenn sowohl "
+"»simple_allow_users« als auch »simple_deny_users« definiert sind."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:133
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the simple access provider-specific options."
+msgstr ""
+"Das folgende Beispiel geht davon aus, dass SSSD korrekt konfiguriert ist und "
+"example.com eine der im Abschnitt <replaceable>[sssd]</replaceable> "
+"erwähnten Domains ist. Die Beispiele zeigen nur die anbieterspezifischen "
+"Optionen des einfachen Anbieters."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-simple.5.xml:140
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" access_provider = simple\n"
+" simple_allow_users = user1, user2\n"
+msgstr ""
+" [domain/example.com]\n"
+" access_provider = simple\n"
+" simple_allow_users = Benutzer1, Benutzer2\n"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
+msgid "sssd-ipa"
+msgstr "sssd-ipa"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:23
+msgid ""
+"This manual page describes the configuration of the IPA provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+"Diese Handbuchseite beschreibt die Konfiguration des IPA-Anbieters für "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Eine ausführliche Syntax-Referenz finden Sie im Abschnitt "
+"»DATEIFORMAT« der Handbuchseite <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:36
+msgid ""
+"The IPA provider is a back end used to connect to an IPA server. (Refer to "
+"the freeipa.org web site for information about IPA servers.) This provider "
+"requires that the machine be joined to the IPA domain; configuration is "
+"almost entirely self-discovered and obtained directly from the server."
+msgstr ""
+"Der IPA-Anbieter ist ein Backend, das zum Verbinden mit einem IPA-Server "
+"benutzt wird. (Informationen über IPA-Server finden Sie auf der Website "
+"»freeipa.org«.) Dieser Anbieter erfordert, dass der Rechner einer IPA-Domain "
+"beitritt. Die Konfiguration wird nahezu vollständig selbst ermittelt und "
+"direkt vom Server genommen."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:43
+msgid ""
+"The IPA provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+"Der IPA-Anbieter akzeptiert dieselben Optionen, die vom Identitätsanbieter "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> und dem Authentifizierungsanbieter <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> benutzt werden, mit einigen nachfolgend beschriebenen "
+"Ausnahmen."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:55
+msgid ""
+"However, it is neither necessary nor recommended to set these options. IPA "
+"provider can also be used as an access and chpass provider. As an access "
+"provider it uses HBAC (host-based access control) rules. Please refer to "
+"freeipa.org for more information about HBAC. No configuration of access "
+"provider is required on the client side."
+msgstr ""
+"Es ist jedoch weder nötig noch empfohlen, diese Optionen zu setzen. Der IPA-"
+"Anbieter kann außerdem als Zugriffs- und Chpass-Anbieter benutzt werden. Als "
+"Zugriffsanbieter verwendet er HBAC-Regeln (host-based access control/"
+"rechnerbasierte Zugriffssteuerung). Bitte wenden Sie sich an freeipa.org, um "
+"weitere Informationen über HBAC zu erhalten. Client-seitig ist keine "
+"Konfiguration des Zugriffsanbieters erforderlich."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:62
+msgid ""
+"The IPA provider will use the PAC responder if the Kerberos tickets of users "
+"from trusted realms contain a PAC. To make configuration easier the PAC "
+"responder is started automatically if the IPA ID provider is configured."
+msgstr ""
+"Der IPA-Anbieter wird den PAC-Responder benutzen, falls die Kerberos-Tickets "
+"von Anwendern vertrauenswürdiger Realms ein PAC enthalten. Um die "
+"Konfiguration zu vereinfachen, wird der PAC-Responder automatisch gestartet, "
+"falls der IPA-ID-Anbieter konfiguriert ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:78
+msgid "ipa_domain (string)"
+msgstr "ipa_domain (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:81
+msgid ""
+"Specifies the name of the IPA domain. This is optional. If not provided, "
+"the configuration domain name is used."
+msgstr ""
+"gibt den Namen der IPA-Domain an. Dies ist optional. Ist er nicht angegeben, "
+"wird der Domain-Name der Konfiguration benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:89
+msgid "ipa_server, ipa_backup_server (string)"
+msgstr "ipa_server, ipa_backup_server (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:92
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the IPA servers to "
+"which SSSD should connect in the order of preference. For more information "
+"on failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+"Die durch Kommata getrennte Liste von IP-Adressen oder Rechnernamen der IPA-"
+"Server in der Reihenfolge, in der sich SSSD mit ihnen verbinden soll. "
+"Weitere Informationen über Ausfallsicherung und Redundanz finden Sie im "
+"Abschnitt »AUSFALLSICHERUNG«. Falls automatisches Auffinden aktiviert ist, "
+"ist dies optional. Weitere Informationen finden Sie im Abschnitt "
+"»DIENSTSUCHE«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:105
+msgid "ipa_hostname (string)"
+msgstr "ipa_hostname (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:108
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the IPA domain to identify this host."
+msgstr ""
+"optional, kann auf Maschinen, bei denen »hostname(5)« nicht den voll "
+"qualifizierten Namen in der IPA-Domain widerspiegelt, benutzt werden, um sie "
+"zu identifizieren."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:116
+#, fuzzy
+#| msgid "dyndns_update (boolean)"
+msgid "ipa_dyndns_update (boolean)"
+msgstr "dyndns_update (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:119
+msgid ""
+"Optional. This option tells SSSD to automatically update the DNS server "
+"built into FreeIPA v2 with the IP address of this client."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:124
+msgid ""
+"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
+"the default Kerberos realm must be set properly in /etc/krb5.conf"
+msgstr ""
+"HINWEIS: Auf älteren Systemen (wie RHEL 5) muss der Standard-Kerberos-Realm "
+"ordentlich in /etc/krb5.conf gesetzt sein, damit dies zuverlässig "
+"funktioniert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:135
+#, fuzzy
+#| msgid "dyndns_iface (string)"
+msgid "ipa_dyndns_iface (string)"
+msgstr "dyndns_iface (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:138
+#, fuzzy
+#| msgid ""
+#| "Optional. Applicable only when dyndns_update is true. Choose the "
+#| "interface whose IP address should be used for dynamic DNS updates."
+msgid ""
+"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
+"interface whose IP address should be used for dynamic DNS updates."
+msgstr ""
+"optional, nur anwendbar, wenn »dyndns_update« »true« ist. Wählen sie die "
+"Schnittstelle, deren IP-Adresse zum Aktualisieren des dynamischen DNS "
+"benutzt werden soll."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:143
+msgid "Default: Use the IP address of the IPA LDAP connection"
+msgstr "Voreinstellung: verwendet die IP-Adresse der IPA-LDAP-Verbindung"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:149
+msgid "ipa_hbac_search_base (string)"
+msgstr "ipa_hbac_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:152
+msgid "Optional. Use the given string as search base for HBAC related objects."
+msgstr ""
+"optional, verwendet die angegebene Zeichenkette als Suchgrundlage für HBAC-"
+"bezogene Objekte"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:156
+msgid "Default: Use base DN"
+msgstr "Voreinstellung: verwendet Basis-DN"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:162
+msgid "ipa_host_search_base (string)"
+msgstr "ipa_host_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:165
+msgid "Optional. Use the given string as search base for host objects."
+msgstr ""
+"optional, verwendet die angegebene Zeichenkette als Suchgrundlage für "
+"Rechnerobjekte"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:169 sssd-ipa.5.xml:193 sssd-ipa.5.xml:212 sssd-ipa.5.xml:231
+msgid ""
+"See <quote>ldap_search_base</quote> for information about configuring "
+"multiple search bases."
+msgstr ""
+"Informationen über das Konfigurieren mehrerer Suchgrundlagen finden Sie "
+"unter »ldap_search_base«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:174
+msgid ""
+"If filter is given in any of search bases and "
+"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
+"will be ignored."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
+#: include/ldap_search_bases_experimental.xml:23
+msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
+msgstr "Voreinstellung: der Wert von <emphasis>ldap_search_base</emphasis>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:186
+msgid "ipa_selinux_search_base (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:189
+msgid "Optional. Use the given string as search base for SELinux user maps."
+msgstr ""
+"optional, verwendet die angegebene Zeichenkette als Suchgrundlage für "
+"SELinux-Benutzerabbildungen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:205
+msgid "ipa_subdomains_search_base (string)"
+msgstr "ipa_subdomains_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:208
+msgid "Optional. Use the given string as search base for trusted domains."
+msgstr ""
+"optional, verwendet die angegebene Zeichenkette als Suchgrundlage für "
+"vertrauenswürdige Domains"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:217
+msgid "Default: the value of <emphasis>cn=trusts,%basedn</emphasis>"
+msgstr "Voreinstellung: der Wert von <emphasis>cn=trusts,%basedn</emphasis>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:224
+msgid "ipa_master_domain_search_base (string)"
+msgstr "ipa_master_domain_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:227
+msgid "Optional. Use the given string as search base for master domain object."
+msgstr ""
+"optional, verwendet die angegebene Zeichenkette als Suchgrundlage für das "
+"Master-Domain-Objekt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:236
+msgid "Default: the value of <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
+msgstr "Voreinstellung: der Wert von <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:243 sssd-krb5.5.xml:232
+msgid "krb5_validate (boolean)"
+msgstr "krb5_validate (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:246
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed."
+msgstr ""
+"prüft mit Hilfe von »krb5_keytab«, ob das erhaltene TGT keine Täuschung ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:253
+msgid ""
+"Note that this default differs from the traditional Kerberos provider back "
+"end."
+msgstr ""
+"Beachten Sie, dass sich diese Voreinstellung vom traditionellen Backend des "
+"Kerberos-Anbieters unterscheidet."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:263
+msgid ""
+"The name of the Kerberos realm. This is optional and defaults to the value "
+"of <quote>ipa_domain</quote>."
+msgstr ""
+"der Name des Kerberos-Realm. Dieser ist optional. Standardmäßig ist es der "
+"Wert von »ipa_domain«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:267
+msgid ""
+"The name of the Kerberos realm has a special meaning in IPA - it is "
+"converted into the base DN to use for performing LDAP operations."
+msgstr ""
+"der Name des Kerberos-Realms hat in IPA eine besondere Bedeutung – er wird "
+"in den Basis-DN umgewandelt, um ihn zur Durchführung von LDAP-Transaktionen "
+"zu verwenden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:278
+msgid ""
+"Specifies if the host and user principal should be canonicalized when "
+"connecting to IPA LDAP and also for AS requests. This feature is available "
+"with MIT Kerberos >= 1.7"
+msgstr ""
+"gibt an, ob der Rechner und User Principal beim Verbinden mit IPA-LDAP und "
+"bei AS-Abfragen in die kanonische Form gebracht werden sollen. Diese "
+"Funktionalität ist mit Kerberos >= 1.7 verfügbar."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:291
+msgid "ipa_hbac_refresh (integer)"
+msgstr "ipa_hbac_refresh (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:294
+msgid ""
+"The amount of time between lookups of the HBAC rules against the IPA server. "
+"This will reduce the latency and load on the IPA server if there are many "
+"access-control requests made in a short period."
+msgstr ""
+"die Zeit zwischen dem Abrufen der HBAC-Regeln beim IPA-Server. Dies wird die "
+"Wartezeit und Belastung des IPA-Servers verringern, falls dort viele "
+"Zugriffssteuerungsanfragen in einer kurzen Zeitspanne ankommen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:301
+msgid "Default: 5 (seconds)"
+msgstr "Voreinstellung: 5 (Sekunden)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:306
+msgid "ipa_hbac_treat_deny_as (string)"
+msgstr "ipa_hbac_treat_deny_as (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:309
+msgid ""
+"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
+"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
+"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
+"client will support two modes of operation during this transition period:"
+msgstr ""
+"Diese Option gibt an, wie die missbilligten HBAC-Regeln des DENY-Typs "
+"behandelt werden. Seit FreeIPA v2.1 werden DENY-Regeln nicht länger auf dem "
+"Server unterstützt. Alle Benutzer von FreeIPA werden ihre Regeln zur "
+"Verwendung von ALLOW-Regeln migrieren müssen. Der Client wird während der "
+"Übergangszeit zwei Modi unterstützen:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:318
+msgid ""
+"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
+"users will be denied access."
+msgstr ""
+"<emphasis>DENY_ALL</emphasis>: Falls irgendwelche HBAC-DENY-Regeln entdeckt "
+"werden, wird allen Benutzern der Zugriff verwehrt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:323
+msgid ""
+"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
+"careful with this option, as it may result in opening unintended access."
+msgstr ""
+"<emphasis>IGNORE</emphasis>: SSSD wird alle DENY-Regeln ignorieren. Seien "
+"Sie mit dieser Option sehr vorsichtig, da sie unerwünschtem Zugriff Tür und "
+"Tor öffnen kann."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:328
+msgid "Default: DENY_ALL"
+msgstr "Voreinstellung: DENY_ALL"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:333
+#, fuzzy
+#| msgid "ipa_enable_dns_sites (boolean)"
+msgid "ipa_hbac_support_srchost (boolean)"
+msgstr "ipa_enable_dns_sites (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:336
+msgid ""
+"If this is set to false, then srchost as given to SSSD by PAM will be "
+"ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:340
+msgid ""
+"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
+"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:351
+msgid "ipa_automount_location (string)"
+msgstr "ipa_automount_location (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:354
+msgid "The automounter location this IPA client will be using"
+msgstr "der Ort des Automounters, den dieser IPA-Client benutzen wird"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:357
+msgid "Default: The location named \"default\""
+msgstr "Voreinstellung: der Ort namens »default«"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
+msgid "ipa_netgroup_member_of (string)"
+msgstr "ldap_netgroup_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
+msgid "The LDAP attribute that lists netgroup's memberships."
+msgstr ""
+"das LDAP-Attribut, das die Gruppenmitgliedschaften des Benutzers aufführt"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
+msgid "ipa_netgroup_member_user (string)"
+msgstr "ldap_netgroup_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
+msgid ""
+"The LDAP attribute that lists system users and groups that are direct "
+"members of the netgroup."
+msgstr ""
+"das LDAP-Attribut, das die Gruppenmitgliedschaften des Benutzers aufführt"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
+msgid "Default: memberUser"
+msgstr "Voreinstellung: memberOf"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
+msgid "ipa_netgroup_member_host (string)"
+msgstr "ldap_netgroup_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
+msgid ""
+"The LDAP attribute that lists hosts and host groups that are direct members "
+"of the netgroup."
+msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
+msgid "Default: memberHost"
+msgstr "Voreinstellung: memberOf"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
+msgid "ipa_netgroup_member_ext_host (string)"
+msgstr "ldap_netgroup_member (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
+msgid ""
+"The LDAP attribute that lists FQDNs of hosts and host groups that are "
+"members of the netgroup."
+msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
+msgid "Default: externalHost"
+msgstr "Voreinstellung: root"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
+msgid "ipa_netgroup_domain (string)"
+msgstr "ipa_domain (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
+msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
+msgid "Default: nisDomainName"
+msgstr "Voreinstellung: none"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
+msgid "ipa_host_object_class (string)"
+msgstr "ldap_user_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
+msgid "The object class of a host entry in LDAP."
+msgstr "die Objektklasse eines Benutzereintrags in LDAP"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
+msgid "Default: ipaHost"
+msgstr "Voreinstellung: host"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
+msgid "ipa_host_fqdn (string)"
+msgstr "ipa_hostname (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
+msgid "The LDAP attribute that contains FQDN of the host."
+msgstr "das LDAP-Attribut, das die Namen der Gruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
+msgid "Default: fqdn"
+msgstr "Voreinstellung: cn"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
+msgid "ipa_selinux_usermap_object_class (string)"
+msgstr "ldap_user_object_class (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_name (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
+msgid "The LDAP attribute that contains the name of SELinux usermap."
+msgstr "das LDAP-Attribut, das die Namen der Gruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_member_user (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
+msgid ""
+"The LDAP attribute that contains all users / groups this rule match against."
+msgstr ""
+"das LDAP-Attribut, das die öffentlichen SSH-Schlüssel des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_member_host (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
+msgid ""
+"The LDAP attribute that contains all hosts / hostgroups this rule match "
+"against."
+msgstr ""
+"das LDAP-Attribut, das die Netzgruppen-Triples (Rechner, Benutzer, Domain) "
+"enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_see_also (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
+msgid ""
+"The LDAP attribute that contains DN of HBAC rule which can be used for "
+"matching instead of memberUser and memberHost"
+msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: ou"
+msgid "Default: seeAlso"
+msgstr "Voreinstellung: ou"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_selinux_user (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
+msgid "The LDAP attribute that contains SELinux user string itself."
+msgstr ""
+"das LDAP-Attribut, das die öffentlichen SSH-Schlüssel des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: sudoUser"
+msgid "Default: ipaSELinuxUser"
+msgstr "Voreinstellung: sudoUser"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_enabled (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
+msgid ""
+"The LDAP attribute that contains whether or not is user map enabled for "
+"usage."
+msgstr ""
+"das LDAP-Attribut, das den Pfad zur Standard-Shell des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: loginDisabled"
+msgid "Default: ipaEnabledFlag"
+msgstr "Voreinstellung: loginDisabled"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_user_category (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
+msgid "The LDAP attribute that contains user category such as 'all'."
+msgstr ""
+"das LDAP-Attribut, das die öffentlichen SSH-Schlüssel des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: try"
+msgid "Default: userCategory"
+msgstr "Voreinstellung: try"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_host_category (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
+msgid "The LDAP attribute that contains host category such as 'all'."
+msgstr ""
+"das LDAP-Attribut, das den Pfad zur Standard-Shell des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
+msgid "Default: hostCategory"
+msgstr "Voreinstellung: host"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
+msgid "ipa_selinux_usermap_uuid (string)"
+msgstr "ipa_selinux_search_base (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
+msgid "The LDAP attribute that contains unique ID of the user map."
+msgstr ""
+"das LDAP-Attribut, das den Namen des Home-Verzeichnisses des Benutzers "
+"enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
+msgid "Default: ipaUniqueID"
+msgstr "Voreinstellung: nsUniqueId"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ldap_user_ssh_public_key (string)"
+msgid "ipa_host_ssh_public_key (string)"
+msgstr "ldap_user_ssh_public_key (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
+msgid "The LDAP attribute that contains the host's SSH public keys."
+msgstr ""
+"das LDAP-Attribut, das die öffentlichen SSH-Schlüssel des Benutzers enthält"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
+msgid "Default: ipaSshPubKey"
+msgstr "Voreinstellung: »false«"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ipa.5.xml:585
+msgid "SUBDOMAINS PROVIDER"
+msgstr "ANBIETER VON UNTER-DOMAINS"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:587
+msgid ""
+"The IPA subdomains provider behaves slightly differently if it is configured "
+"explicitly or implicitly."
+msgstr ""
+"Der Anbieter für IPA-Subdomains verhält sich geringfügig anders, je nachdem, "
+"ob er explizit oder implizit konfiguriert wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:591
+msgid ""
+"If the option 'subdomains_provider = ipa' is found in the domain section of "
+"sssd.conf, the IPA subdomains provider is configured explicitly, and all "
+"subdomain requests are sent to the IPA server if necessary."
+msgstr ""
+"Falls die Option »subdomains_provider = ipa« im Domain-Abschnitt der »sssd."
+"conf« gefunden wird, wird der IPA-Subdomain-Anbieter explizit konfiguriert "
+"und alle Subdomain-Anfragen werden, falls nötig, an den IPA-Server gesandt."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:597
+#, fuzzy
+#| msgid ""
+#| "If the option 'subdomains_provider' is not set in the domain section of "
+#| "sssd.conf but there is the option 'id_provider = ipa', the IPA subdomains "
+#| "provider is configured implicitly. In this case, if a subdomain request "
+#| "fails and indicates that the server does not support subdomains, i.e. is "
+#| "not configured for trusts, the IPA subdomains provider is disabled. After "
+#| "an hour or after the IPA provider goes online, the subdomains provider is "
+#| "enabled again."
+msgid ""
+"If the option 'subdomains_provider' is not set in the domain section of sssd."
+"conf but there is the option 'id_provider = ipa', the IPA subdomains "
+"provider is configured implictly. In this case, if a subdomain request fails "
+"and indicates that the server does not support subdomains, i.e. is not "
+"configured for trusts, the IPA subdomains provider is disabled. After an "
+"hour or after the IPA provider goes online, the subdomains provider is "
+"enabled again."
+msgstr ""
+"Falls die Option »subdomains_provider« nicht im Domain-Abschnitt der »sssd."
+"conf« gesetzt ist, es dort aber die Option »id_provider = ipa« gibt, wird "
+"der IPA-Subdomain-Anbieter implizit konfiguriert. In diesem Fall wird der "
+"IPA-Anbieter deaktiviert, falls eine Subdomain-Anfrage fehlschlägt und "
+"anzeigt, dass der Server keine Subdomains unterstützt, d.h. nicht zum "
+"Vertrauen konfiguriert ist. Nach einer Stunde oder nachdem der IPA-Server "
+"online gegangen ist, wird der Subdomain-Anbieter erneut aktiviert."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:614
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the ipa provider-specific options."
+msgstr ""
+"Das folgende Beispiel geht davon aus, dass SSSD korrekt konfiguriert und "
+"example.com eine der im Abschnitt <replaceable>[sssd]</replaceable> "
+"erwähnten Domänen ist. Diese Beispiele zeigen nur die anbieterspezifischen "
+"Optionen von IPA."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ipa.5.xml:621
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" id_provider = ipa\n"
+" ipa_server = ipaserver.example.com\n"
+" ipa_hostname = myhost.example.com\n"
+msgstr ""
+" [domain/example.com]\n"
+" id_provider = ipa\n"
+" ipa_server = ipaserver.example.com\n"
+" ipa_hostname = myhost.example.com\n"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ad.5.xml:10 sssd-ad.5.xml:16
+msgid "sssd-ad"
+msgstr "sssd-ad"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:23
+msgid ""
+"This manual page describes the configuration of the AD provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+"Diese Handbuchseite beschreibt die Konfiguration des AD-Anbieters für "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Eine ausführliche Syntax-Referenz finden Sie im Abschnitt "
+"»DATEIFORMAT« der Handbuchseite <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:36
+msgid ""
+"The AD provider is a back end used to connect to an Active Directory server. "
+"This provider requires that the machine be joined to the AD domain and a "
+"keytab is available."
+msgstr ""
+"Der AD-Anbieter ist ein Backend, das für die Verbindung zu einem Active-"
+"Directory-Server benutzt wird. Dieser Anbieter erfordert, dass die Maschine "
+"der AD-Domain beigetreten und eine Keytab verfügbar ist."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:41
+msgid ""
+"The AD provider supports connecting to Active Directory 2008 R2 or later. "
+"Earlier versions may work, but are unsupported."
+msgstr ""
+"Der AD-Anbieter unterstützt das Verbinden mit Active Directory 2008 R2 oder "
+"neuer. Frühere Versionen könnten funktionieren, werden aber nicht "
+"unterstützt."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:45
+msgid ""
+"The AD provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+"Der AD-Anbieter akzeptiert dieselben Optionen, die vom Identitätsanbieter "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> und dem Authentifizierungsanbieter <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> benutzt werden, mit einigen unten beschriebenen Ausnahmen."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:57
+#, fuzzy
+#| msgid ""
+#| "However, it is neither necessary nor recommended to set these options. "
+#| "The AD provider can also be used as an access, chpass and sudo provider. "
+#| "No configuration of the access provider is required on the client side."
+msgid ""
+"However, it is neither necessary nor recommended to set these options. The "
+"AD provider can also be used as an access and chpass provider. No "
+"configuration of the access provider is required on the client side."
+msgstr ""
+"Allerdings ist es weder notwendig noch empfehlenswert, diese Optionen zu "
+"setzen. Der AD-Anbieter kann auch als Anbieter für »access«, »chpass« und "
+"»sudo« verwendet werden. Auf der Client-Seite ist keine Konfiguration des "
+"Zugriffs-Anbieters erforderlich."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:69
+#, no-wrap
+msgid ""
+"ldap_id_mapping = False\n"
+" "
+msgstr ""
+"ldap_id_mapping = False\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:63
+#, fuzzy
+#| msgid ""
+#| "By default, the AD provider will map UID and GID values from the "
+#| "objectSID parameter in Active Directory. For details on this, see the "
+#| "<quote>ID MAPPING</quote> section below. If you want to disable ID "
+#| "mapping and instead rely on POSIX attributes defined in Active Directory, "
+#| "you should set <placeholder type=\"programlisting\" id=\"0\"/> In order "
+#| "to retrieve users and groups using POSIX attributes from trusted domains, "
+#| "the AD administrator must make sure that the POSIX attributes are "
+#| "replicated to the Global Catalog."
+msgid ""
+"By default, the AD provider will map UID and GID values from the objectSID "
+"parameter in Active Directory. For details on this, see the <quote>ID "
+"MAPPING</quote> section below. If you want to disable ID mapping and instead "
+"rely on POSIX attributes defined in Active Directory, you should set "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+"Standardmäßig bildet der Active-Directory-Anbieter die Werte für Benutzer- "
+"und Gruppen-ID des objectSID-Parameters in Active Directory ab. Details "
+"hierzu finden Sie im nachfolgenden Abschnitt <quote>ID-ABBILDUNG</quote>. "
+"Falls Sie die ID-Abbildung deaktivieren und stattdessen die in Active "
+"Directory definierten POSIX-Attribute verwenden wollen, sollten Sie "
+"<placeholder type=\"programlisting\" id=\"0\"/> setzen. Um Benutzer und "
+"Gruppen von vertrauenswürdigen Domains mittels POSIX-Attributen abfragen zu "
+"können, muss der AD-Administrator sicherstellen, dass die POSIX-Attribute im "
+"Globalen Katalog repliziert werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:83
+msgid "ad_domain (string)"
+msgstr "ad_domain (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:86
+msgid ""
+"Specifies the name of the Active Directory domain. This is optional. If not "
+"provided, the configuration domain name is used."
+msgstr ""
+"gibt den Namen der Active-Directory-Domain an. Dieser ist optional. Ist er "
+"nicht angegeben, wird der Name der konfigurierten Domain benutzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:91
+msgid ""
+"For proper operation, this option should be specified as the lower-case "
+"version of the long version of the Active Directory domain."
+msgstr ""
+"Damit dies ordentlich funktioniert, sollte diese Option in der "
+"kleingeschriebenen Variante der langen Version der Active-Directory-Domain "
+"angegeben werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:99
+msgid "ad_server, ad_backup_server (string)"
+msgstr "ad_server, ad_backup_server (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:102
+#, fuzzy
+#| msgid ""
+#| "The comma-separated list of IP addresses or hostnames of the IPA servers "
+#| "to which SSSD should connect in the order of preference. For more "
+#| "information on failover and server redundancy, see the <quote>FAILOVER</"
+#| "quote> section. This is optional if autodiscovery is enabled. For more "
+#| "information on service discovery, refer to the <quote>SERVICE DISCOVERY</"
+#| "quote> section."
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the AD servers to "
+"which SSSD should connect in order of preference. For more information on "
+"failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+"Die durch Kommata getrennte Liste von IP-Adressen oder Rechnernamen der IPA-"
+"Server in der Reihenfolge, in der sich SSSD mit ihnen verbinden soll. "
+"Weitere Informationen über Ausfallsicherung und Redundanz finden Sie im "
+"Abschnitt »AUSFALLSICHERUNG«. Falls automatisches Auffinden aktiviert ist, "
+"ist dies optional. Weitere Informationen finden Sie im Abschnitt "
+"»DIENSTSUCHE«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:115
+msgid "ad_hostname (string)"
+msgstr "ad_hostname (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:118
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the Active Directory domain to identify this "
+"host."
+msgstr ""
+"optional, kann auf Maschinen, bei denen »hostname(5)« nicht den voll "
+"qualifizierten Namen in der Active-Directory-Domain widerspiegelt, benutzt "
+"werden, um sie zu identifizieren."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:124
+msgid ""
+"This field is used to determine the host principal in use in the keytab. It "
+"must match the hostname for which the keytab was issued."
+msgstr ""
+"Dieses Feld wird benutzt, um den in der Keytab benutzten Host Principal zu "
+"bestimmen. Er muss dem Rechnernamen entsprechen, für die die Keytab "
+"ausgegeben wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd-ad.5.xml:193
+#, no-wrap
+msgid ""
+"fallback_homedir = /home/%u\n"
+" "
+msgstr ""
+"fallback_homedir = /home/%u\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:231
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This example shows only the AD provider-specific options."
+msgstr ""
+"Das folgende Beispiel geht davon aus, dass SSSD korrekt konfiguriert ist und "
+"example.com auf eine der Domains im Abschnitt <replaceable>[sssd]</"
+"replaceable> gesetzt ist. Dieses Beispiel zeigt nur die anbieterspezifischen "
+"Optionen von AD."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:238
+#, no-wrap
+msgid ""
+"[domain/EXAMPLE]\n"
+"id_provider = ad\n"
+"auth_provider = ad\n"
+"access_provider = ad\n"
+"chpass_provider = ad\n"
+"\n"
+"ad_server = dc1.example.com\n"
+"ad_hostname = client.example.com\n"
+"ad_domain = example.com\n"
+msgstr ""
+"[domain/EXAMPLE]\n"
+"id_provider = ad\n"
+"auth_provider = ad\n"
+"access_provider = ad\n"
+"chpass_provider = ad\n"
+"\n"
+"ad_server = dc1.example.com\n"
+"ad_hostname = client.example.com\n"
+"ad_domain = example.com\n"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:258
+#, no-wrap
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_order = expire\n"
+"ldap_account_expire_policy = ad\n"
+msgstr ""
+"access_provider = ldap\n"
+"ldap_access_order = expire\n"
+"ldap_account_expire_policy = ad\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:254
+msgid ""
+"The AD access control provider checks if the account is expired. It has the "
+"same effect as the following configuration of the LDAP provider: "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+"Der AD-Zugriffssteuerungsanbieter prüft, ob das Konto erloschen ist. Es hat "
+"dieselben Auswirkungen wie die folgende Konfiguration des LDAP-Anbieters: "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-sudo.5.xml:10 sssd-sudo.5.xml:16
+msgid "sssd-sudo"
+msgstr "sssd-sudo"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-sudo.5.xml:17
+msgid "Configuring sudo with the SSSD back end"
+msgstr "Sudo mit dem SSSD-Backend konfigurieren"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:23
+msgid ""
+"This manual page describes how to configure <citerefentry> "
+"<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </citerefentry> "
+"to work with <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> and how SSSD caches sudo rules."
+msgstr ""
+"Diese Handbuchseite beschreibt, wie <citerefentry> <refentrytitle>sudo</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> konfiguriert wird, "
+"damit es zusammen mit <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> funktioniert und wie SSSD Sudo-"
+"Regeln zwischenspeichert."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:36
+msgid "Configuring sudo to cooperate with SSSD"
+msgstr "Sudo so konfigurieren, dass es mit SSSD zusammenarbeitet"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:38
+msgid ""
+"To enable SSSD as a source for sudo rules, add <emphasis>sss</emphasis> to "
+"the <emphasis>sudoers</emphasis> entry in <citerefentry> "
+"<refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+"Um SSSD als eine Quelle von Sudo-Regeln zu aktivieren, fügen Sie dem Eintrag "
+"<emphasis>sudoers</emphasis> in <citerefentry> <refentrytitle>nsswitch.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> <emphasis>sss</"
+"emphasis> hinzu."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:47
+msgid ""
+"For example, to configure sudo to first lookup rules in the standard "
+"<citerefentry> <refentrytitle>sudoers</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> file (which should contain rules that apply to "
+"local users) and then in SSSD, the nsswitch.conf file should contain the "
+"following line:"
+msgstr ""
+"Um zum Beispiel Sudo so zu konfigurieren, dass es zuerst die Regeln in der "
+"Standarddatei <citerefentry> <refentrytitle>sudoers</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> nachschlägt (diese sollten Regeln "
+"umfassen, die für lokale Benutzer gelten) und dann die in SSSD, sollte die "
+"Datei »nsswitch.conf« die folgende Zeile enthalten:"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:57
+#, no-wrap
+msgid "sudoers: files sss\n"
+msgstr "sudoers: files sss\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:61
+msgid ""
+"More information about configuring the sudoers search order from the "
+"nsswitch.conf file as well as information about the LDAP schema that is used "
+"to store sudo rules in the directory can be found in <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+"Weitere Informationen über die Konfiguration der Suchreihenfolge der "
+"»sudoers« aus der Datei »nsswitch.conf« sowie das LDAP-Schema, das zum "
+"Speichern von Sudo-Regeln im Verzeichnis benutzt wird, können Sie unter "
+"<citerefentry> <refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> finden."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:72
+msgid "Configuring SSSD to fetch sudo rules"
+msgstr "SSSD zum Abrufen von Sudo-Regeln konfigurieren"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:74
+msgid ""
+"The following example shows how to configure SSSD to download sudo rules "
+"from an LDAP server."
+msgstr ""
+"Das folgende Beispiel zeigt, wie SSSD konfiguriert wird, damit es die Sudo-"
+"Regeln von einem LDAP-Server herunterlädt."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:79
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"config_file_version = 2\n"
+"services = nss, pam, sudo\n"
+"domains = EXAMPLE\n"
+"\n"
+"[domain/EXAMPLE]\n"
+"id_provider = ldap\n"
+"sudo_provider = ldap\n"
+"ldap_uri = ldap://example.com\n"
+"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
+msgstr ""
+"[sssd]\n"
+"config_file_version = 2\n"
+"services = nss, pam, sudo\n"
+"domains = EXAMPLE\n"
+"\n"
+"[domain/EXAMPLE]\n"
+"id_provider = ldap\n"
+"sudo_provider = ldap\n"
+"ldap_uri = ldap://example.com\n"
+"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:92
+#, fuzzy
+#| msgid ""
+#| "When the SSSD is configured to use IPA as the ID provider, the sudo "
+#| "provider is automatically enabled. The sudo search base is configured to "
+#| "use the compat tree (ou=sudoers,$DC)."
+msgid ""
+"When the SSSD is configured to use the IPA provider, the sudo provider is "
+"automatically enabled. The sudo search base is configured to use the compat "
+"tree (ou=sudoers,$DC)."
+msgstr ""
+"Wenn SSSD so konfiguriert ist, dass IPA als ID-Provider verwendet wird, dann "
+"ist der Sudo-Provider automatisch aktiviert. Die Sudo-Suchmaschine wird so "
+"konfiguriert, dass der compat-Baum verwendet wird (ou=sudoers,$DC)."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:99
+msgid "The SUDO rule caching mechanism"
+msgstr "Der Zwischenspeichermechanismus für Sudo-Regeln"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:101
+msgid ""
+"The biggest challenge, when developing sudo support in SSSD, was to ensure "
+"that running sudo with SSSD as the data source provides the same user "
+"experience and is as fast as sudo but keeps providing the most current set "
+"of rules as possible. To satisfy these requirements, SSSD uses three kinds "
+"of updates. They are referred to as full refresh, smart refresh and rules "
+"refresh."
+msgstr ""
+"Die größte Herausforderung bei der Entwicklung von Sudo-Unterstützung in "
+"SSSD war es, sicherzustellen, dass beim Ausführen von Sudo mit SSSD die "
+"Datenquelle dieselbe Benutzererfahrung bereitstellt und so schnell wie Sudo "
+"ist, aber weiterhin so viele aktuelle Regelsätze wie möglich bereitstellt. "
+"Um diesen Anforderungen zu genügen, verwendet SSSD drei Arten von "
+"Aktualisierungen. Sie werden als vollständiges Aktualisieren, kluges "
+"Aktualisieren und Regelaktualisierung bezeichnet."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:109
+msgid ""
+"The <emphasis>smart refresh</emphasis> periodically downloads rules that are "
+"new or were modified after the last update. Its primary goal is to keep the "
+"database growing by fetching only small increments that do not generate "
+"large amounts of network traffic."
+msgstr ""
+"Das <emphasis>kluge Aktualisieren</emphasis> lädt periodisch Regeln "
+"herunter, die neu sind oder seit der letzten Aktualisierung geändert wurden. "
+"Das Hauptziel hierbei ist es, die Datenbank anwachsen zu lassen, indem nur "
+"kleine Erweiterungen abgerufen werden, die keinen großen Netzwerkverkehr "
+"erzeugen."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:115
+msgid ""
+"The <emphasis>full refresh</emphasis> simply deletes all sudo rules stored "
+"in the cache and replaces them with all rules that are stored on the server. "
+"This is used to keep the cache consistent by removing every rule which was "
+"deleted from the server. However, full refresh may produce a lot of traffic "
+"and thus it should be run only occasionally depending on the size and "
+"stability of the sudo rules."
+msgstr ""
+"Das <emphasis>vollständige Aktualisieren</emphasis> löscht einfach alle im "
+"Zwischenspeicher abgelegten Regeln und ersetzt sie durch die auf dem Server "
+"gespeicherten Regeln. Dies wird benutzt, um den Zwischenspeicher dadurch "
+"konsistent zu halten, dass jede von Server gelöschte Regel entfernt wird. "
+"Ein vollständiges Aktualisieren kann jedoch eine hohe Last erzeugen und "
+"sollte daher nur gelegentlich abhängig von der Größe und Stabilität der Sudo-"
+"Regeln ausgeführt werden."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:123
+msgid ""
+"The <emphasis>rules refresh</emphasis> ensures that we do not grant the user "
+"more permission than defined. It is triggered each time the user runs sudo. "
+"Rules refresh will find all rules that apply to this user, check their "
+"expiration time and redownload them if expired. In the case that any of "
+"these rules are missing on the server, the SSSD will do an out of band full "
+"refresh because more rules (that apply to other users) may have been deleted."
+msgstr ""
+"Die <emphasis>Regelaktualisierung</emphasis> stellt sicher, dass dem "
+"Benutzer nicht mehr Rechte als definiert gewährt werden. Es wird jedesmal "
+"ausgelöst, wenn der Benutzer Sudo ausführt. Regelaktualisierung wird alle "
+"Regeln suchen, die für diesen Benutzer gelten, ihren Ablaufzeitpunkt prüfen "
+"und sie erneut herunterladen, falls sie erloschen sind. Im Fall, dass "
+"irgendwelche der Regeln auf dem Server fehlen, wird SSSD außer der Reihe ein "
+"vollständiges Aktualisieren durchführen, da möglicherweise weitere Regeln "
+"(die für andere Benutzer gelten) gelöscht wurden."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:132
+msgid ""
+"If enabled, SSSD will store only rules that can be applied to this machine. "
+"This means rules that contain one of the following values in "
+"<emphasis>sudoHost</emphasis> attribute:"
+msgstr ""
+"SSSD wird, falls aktiviert, nur Regeln speichern, die auf diese Maschine "
+"angewandt werden können. Das bedeutet, Regeln, die einen der folgenden Werte "
+"im Attribut <emphasis>sudoHost</emphasis> enthalten:"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:139
+msgid "keyword ALL"
+msgstr "Schlüsselwort ALL"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:144
+msgid "wildcard"
+msgstr "Platzhalter"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:149
+msgid "netgroup (in the form \"+netgroup\")"
+msgstr "Netzgruppe (in der Form »+Netzgruppe«)"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:154
+msgid "hostname or fully qualified domain name of this machine"
+msgstr "Rechnername oder voll qualifizierter Domain-Namen dieser Maschine"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:159
+msgid "one of the IP addresses of this machine"
+msgstr "eine der IP-Adressen dieser Maschine"
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:164
+msgid "one of the IP addresses of the network (in the form \"address/mask\")"
+msgstr "eine der IP-Adressen des Netzwerks (in der Form »Adresse/Maske«)"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:170
+msgid ""
+"There are many configuration options that can be used to adjust the "
+"behavior. Please refer to \"ldap_sudo_*\" in <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> and \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+msgstr ""
+"Es gibt viele Konfigurationsoptionen, die benutzt werden können, um das "
+"Verhalten anzupassen. Bitte lesen Sie »ldap_sudo_*« in <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> und \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.8.xml:10 sssd.8.xml:15
+msgid "sssd"
+msgstr "sssd"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.8.xml:16
+msgid "System Security Services Daemon"
+msgstr "System Security Services Daemon (Systemsicherheitsdienst-Daemon)"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sssd.8.xml:21
+msgid ""
+"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+"<command>sssd</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:31
+msgid ""
+"<command>SSSD</command> provides a set of daemons to manage access to remote "
+"directories and authentication mechanisms. It provides an NSS and PAM "
+"interface toward the system and a pluggable backend system to connect to "
+"multiple different account sources as well as D-Bus interface. It is also "
+"the basis to provide client auditing and policy services for projects like "
+"FreeIPA. It provides a more robust database to store local users as well as "
+"extended user data."
+msgstr ""
+"<command>SSSD</command> stellt einen Satz Daemons bereit, um den Zugriff auf "
+"ferne Verzeichnisse und Authentifizierungsmechanismen zu verwalten. Es "
+"bietet eine NSS- und PAM-Schnittstelle zum System und ein erweiterbares "
+"Backend-System zum Verbinden mit mehreren unterschiedlichen Kontenquellen "
+"sowie der D-Bus-Schnittstelle. Es bildet außerdem die Grundlage für das "
+"Bereitstellen von Client-Überprüfungen und Richtliniendiensten für Projekte "
+"wie FreeIPA. Es stellt eine robustere Datenbank bereit, um lokale Benutzer "
+"sowie erweiterte Benutzerdaten zu speichern."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:46
+msgid ""
+"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
+"replaceable>"
+msgstr ""
+"<option>-d</option>,<option>--debug-level</option> <replaceable>STUFE</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:53
+msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
+msgstr "<option>--debug-timestamps=</option><replaceable>Modus</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:57
+msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
+msgstr ""
+"<emphasis>1</emphasis>: Den Debug-Nachrichten wird ein Zeitstempel "
+"hinzugefügt."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:60
+msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
+msgstr ""
+"<emphasis>0</emphasis>: Zeitstempel in Debug-Nachrichten werden deaktiviert."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:69
+msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
+msgstr "<option>--debug-microseconds=</option><replaceable>Modus</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:73
+msgid ""
+"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
+msgstr ""
+"<emphasis>1</emphasis>: Dem Zeitstempel in Debug-Nachrichten werden "
+"Millisekunden hinzugefügt."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:76
+msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
+msgstr ""
+"<emphasis>0</emphasis>: Millisekunden werden in Zeitstempeln deaktiviert"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:85
+msgid "<option>-f</option>,<option>--debug-to-files</option>"
+msgstr "<option>-f</option>,<option>--debug-to-files</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:89
+msgid ""
+"Send the debug output to files instead of stderr. By default, the log files "
+"are stored in <filename>/var/log/sssd</filename> and there are separate log "
+"files for every SSSD service and domain."
+msgstr ""
+"sendet die Ausgabe der Fehlersuche in Dateien statt auf die "
+"Standardfehlerausgabe. Standardmäßig werden die Protokolldateien in "
+"<filename>/var/log/sssd</filename> gespeichert. Dort gibt es separate "
+"Protokolldateien für jeden SSSD-Dienst und jede Domain."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:97
+msgid "<option>-D</option>,<option>--daemon</option>"
+msgstr "<option>-D</option>,<option>--daemon</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:101
+msgid "Become a daemon after starting up."
+msgstr "wird nach dem Start ein Daemon."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:107 sss_seed.8.xml:136
+msgid "<option>-i</option>,<option>--interactive</option>"
+msgstr "<option>-i</option>,<option>--interactive</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:111
+msgid "Run in the foreground, don't become a daemon."
+msgstr "läuft im Vordergrund und wird kein Daemon."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:117 sss_debuglevel.8.xml:42
+msgid "<option>-c</option>,<option>--config</option>"
+msgstr "<option>-c</option>,<option>--config</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:121 sss_debuglevel.8.xml:46
+msgid ""
+"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
+"conf</filename>. For reference on the config file syntax and options, "
+"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+"gibt eine Konfigurationsdatei an, die nicht Standard ist. Die Voreinstellung "
+"ist <filename>/etc/sssd/sssd.conf</filename>. Auskunft über die Syntax und "
+"Optionen der Konfigurationsdatei finden Sie in der Handbuchseite "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:135
+msgid "<option>--version</option>"
+msgstr "<option>--version</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:139
+msgid "Print version number and exit."
+msgstr "gibt die Versionsnummer aus und beendet sich."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.8.xml:147
+msgid "Signals"
+msgstr "Signale"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:150
+msgid "SIGTERM/SIGINT"
+msgstr "SIGTERM/SIGINT"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:153
+msgid ""
+"Informs the SSSD to gracefully terminate all of its child processes and then "
+"shut down the monitor."
+msgstr ""
+"Informiert SSSD, dass es anstandslos alle Kindprozesse beenden und dann das "
+"Überwachungsprogramm herunterfahren soll."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:159
+msgid "SIGHUP"
+msgstr "SIGHUP"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:162
+msgid ""
+"Tells the SSSD to stop writing to its current debug file descriptors and to "
+"close and reopen them. This is meant to facilitate log rolling with programs "
+"like logrotate."
+msgstr ""
+"teilt SSSD mit, dass es das Schreiben des aktuellen Dateideskriptors zur "
+"Fehlersuche stoppen, ihn schließen und erneut öffnen soll. Dies ist dazu "
+"gedacht, das Rotieren von Protokolldateien mit Programmen wie Logrotate zu "
+"erleichtern."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:170
+msgid "SIGUSR1"
+msgstr "SIGUSR1"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:173
+msgid ""
+"Tells the SSSD to simulate offline operation for one minute. This is mostly "
+"useful for testing purposes."
+msgstr ""
+"teilt SSSD mit, dass es eine Minute lang simuliert offline zu sein. Dies ist "
+"meist zu Testzwecken nützlich."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:179
+msgid "SIGUSR2"
+msgstr "SIGUSR2"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:182
+msgid ""
+"Tells the SSSD to go online immediately. This is mostly useful for testing "
+"purposes."
+msgstr ""
+"teilt SSSD mit, dass es sofort online gehen soll. Dies ist meist zu "
+"Testzwecken nützlich."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:193
+msgid ""
+"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
+"applications will not use the fast in memory cache."
+msgstr ""
+"Falls die Umgebungsvariable SSS_NSS_USE_MEMCACHE auf »NO« gesetzt ist, "
+"nutzen Client-Anwendungen den schnellen speicherinternen Zwischenspeicher "
+"nicht."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
+msgid "sss_obfuscate"
+msgstr "sss_obfuscate"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_obfuscate.8.xml:16
+msgid "obfuscate a clear text password"
+msgstr "verschleiert ein Klartextpasswort"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_obfuscate.8.xml:21
+msgid ""
+"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
+"replaceable></arg>"
+msgstr ""
+"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORT]</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:32
+msgid ""
+"<command>sss_obfuscate</command> converts a given password into human-"
+"unreadable format and places it into appropriate domain section of the SSSD "
+"config file."
+msgstr ""
+"<command>sss_obfuscate</command> wandelt ein angegebenes Passwort in ein von "
+"Menschen nicht lesbares Format um und legt es in einem geeigneten Domain-"
+"Abschnitt der SSSD-Konfigurationsdatei ab."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:37
+msgid ""
+"The cleartext password is read from standard input or entered "
+"interactively. The obfuscated password is put into "
+"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
+"<quote>ldap_default_authtok_type</quote> parameter is set to "
+"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more details on these parameters."
+msgstr ""
+"Das Klartextpasswort wird von der Standardeingabe gelesen oder interaktiv "
+"eingegeben. Das verschleierte Passwort wird in den Parameter "
+"»ldap_default_authtok« einer angegebenen SSSD-Domain abgelegt und der "
+"Parameter »ldap_default_authtok_type« wird auf »obfuscated_password« "
+"gesetzt. Weitere Einzelheiten über diese Parameter finden Sie unter "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:49
+msgid ""
+"Please note that obfuscating the password provides <emphasis>no real "
+"security benefit</emphasis> as it is still possible for an attacker to "
+"reverse-engineer the password back. Using better authentication mechanisms "
+"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
+"advised."
+msgstr ""
+"Bitte beachten Sie, dass das Verschleiern von Passwörtern <emphasis>keinen "
+"wirklichen Sicherheitsgewinn</emphasis> bietet, da es einem Angreifer immer "
+"noch möglich ist, das Passwort wieder herzuleiten. Es wird "
+"<emphasis>dringend</emphasis> geraten, bessere Authentifizierungsmechanismen "
+"wie Client-seitige Zertifikate oder GSSAPI zu verwenden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:63
+msgid "<option>-s</option>,<option>--stdin</option>"
+msgstr "<option>-s</option>,<option>--stdin</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:67
+msgid "The password to obfuscate will be read from standard input."
+msgstr ""
+"Das Passwort, das verschleiert werden soll, wird von der Standardeingabe "
+"gelesen."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:79
+#: sss_ssh_knownhostsproxy.1.xml:78
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:79
+msgid ""
+"The SSSD domain to use the password in. The default name is <quote>default</"
+"quote>."
+msgstr ""
+"die SSSD-Domain, in der das Passwort benutzt wird. Der Standardname ist "
+"»default«."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:86
+msgid ""
+"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
+msgstr ""
+"<option>-f</option>,<option>--file</option> <replaceable>DATEI</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:91
+msgid "Read the config file specified by the positional parameter."
+msgstr "liest die durch den Positionsparameter angegebene Konfigurationsdatei."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:95
+msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
+msgstr "Voreinstellung: <filename>/etc/sssd/sssd.conf</filename>"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
+msgid "sss_useradd"
+msgstr "sss_useradd"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_useradd.8.xml:16
+msgid "create a new user"
+msgstr "erstellt einen neuen Benutzer"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_useradd.8.xml:21
+msgid ""
+"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_useradd</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>ANMELDUNG</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_useradd.8.xml:32
+msgid ""
+"<command>sss_useradd</command> creates a new user account using the values "
+"specified on the command line plus the default values from the system."
+msgstr ""
+"<command>sss_useradd</command> erstellt mittels der auf der Befehlszeile "
+"angegebenen Werte sowie der Standardwerte des Systems ein neues "
+"Benutzerkonto."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:43 sss_seed.8.xml:76
+msgid ""
+"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
+msgstr ""
+"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:48
+msgid ""
+"Set the UID of the user to the value of <replaceable>UID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+"setzt die UID des Benutzers auf den Wert von <replaceable>UID</replaceable>. "
+"Wurde der Wert nicht angegeben, wird er automatisch ausgewählt."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:55 sss_usermod.8.xml:43 sss_seed.8.xml:100
+msgid ""
+"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
+"replaceable>"
+msgstr ""
+"<option>-c</option>,<option>--gecos</option> <replaceable>KOMMENTAR</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:60 sss_usermod.8.xml:48 sss_seed.8.xml:105
+msgid ""
+"Any text string describing the user. Often used as the field for the user's "
+"full name."
+msgstr ""
+"irgendeine Zeichenkette, die den Benutzer beschreibt. Dieses Feld wird oft "
+"für den vollständigen Namen des Benutzers verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:67 sss_usermod.8.xml:55 sss_seed.8.xml:112
+msgid ""
+"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
+"replaceable>"
+msgstr ""
+"<option>-h</option>,<option>--home</option> <replaceable>HOME_VERZ</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:72
+msgid ""
+"The home directory of the user account. The default is to append the "
+"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
+"that as the home directory. The base that is prepended before "
+"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
+"baseDirectory</quote> setting in sssd.conf."
+msgstr ""
+"das Home-Verzeichnis des Benutzerkontos. Standardmäßig wird der Name für die "
+"<replaceable>ANMELDUNG</replaceable> an <filename>/home</filename> angehängt "
+"und dies dann als Home-Verzeichnis benutzt. Das Basisverzeichnis, das "
+"<replaceable>ANMELDUNG</replaceable> vorangestellt wird, ist über die "
+"Einstellung »user_defaults/baseDirectory« in der »sssd.conf« einstellbar."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:82 sss_usermod.8.xml:66 sss_seed.8.xml:124
+msgid ""
+"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
+msgstr ""
+"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:87
+msgid ""
+"The user's login shell. The default is currently <filename>/bin/bash</"
+"filename>. The default can be changed with <quote>user_defaults/"
+"defaultShell</quote> setting in sssd.conf."
+msgstr ""
+"die Anmelde-Shell des Benutzers. Voreinstellung ist derzeit <filename>/bin/"
+"bash</filename>. Die Voreinstellung kann über die Einstellung »user_defaults/"
+"defaultShell« in der »sssd.conf« geändert werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:96
+msgid ""
+"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-G</option>,<option>--groups</option> <replaceable>GRUPPEN</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:101
+msgid "A list of existing groups this user is also a member of."
+msgstr "eine Liste existierender Gruppen, denen dieser Benutzer auch angehört"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:107
+msgid "<option>-m</option>,<option>--create-home</option>"
+msgstr "<option>-m</option>,<option>--create-home</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:111
+msgid ""
+"Create the user's home directory if it does not exist. The files and "
+"directories contained in the skeleton directory (which can be defined with "
+"the -k option or in the config file) will be copied to the home directory."
+msgstr ""
+"erstellt das Home-Verzeichnis des Benutzers, falls es nicht existiert. Die "
+"Dateien und Verzeichnisse, die in der Verzeichnisvorlage (die mit der Option "
+"-k oder in der Konfigurationsdatei definiert werden kann) enthalten sind, "
+"werden in das Home-Verzeichnis kopiert."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:121
+msgid "<option>-M</option>,<option>--no-create-home</option>"
+msgstr "<option>-M</option>,<option>--no-create-home</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:125
+msgid ""
+"Do not create the user's home directory. Overrides configuration settings."
+msgstr ""
+"erstellt nicht das Home-Verzeichnis des Benutzers und setzt "
+"Konfigurationseinstellungen außer Kraft."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:132
+msgid ""
+"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
+"replaceable>"
+msgstr ""
+"<option>-k</option>,<option>--skel</option> <replaceable>SKEL-VERZ</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:137
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<command>sss_useradd</command>."
+msgstr ""
+"die Verzeichnisvorlage mit Dateien und Verzeichnissen, die in das durch "
+"<command>sss_useradd</command> neu erstellte Home-Verzeichnis des Benutzers "
+"kopiert werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:143
+msgid ""
+"This option is only valid if the <option>-m</option> (or <option>--create-"
+"home</option>) option is specified, or creation of home directories is set "
+"to TRUE in the configuration."
+msgstr ""
+"Diese Option ist nur gültig, falls die Option <option>-m</option> (oder "
+"<option>--create-home</option>) angegeben wurde oder das Erstellen von Home-"
+"Verzeichnissen in der Konfiguration auf »TRUE« gesetzt ist."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
+msgid ""
+"<option>-Z</option>,<option>--selinux-user</option> "
+"<replaceable>SELINUX_USER</replaceable>"
+msgstr ""
+"<option>-Z</option>,<option>--selinux-user</option> "
+"<replaceable>SELINUX_BENUTZER</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:157
+msgid ""
+"The SELinux user for the user's login. If not specified, the system default "
+"will be used."
+msgstr ""
+"der SELinux-Benutzer für die Anmeldung des Benutzers. Ist er nicht "
+"angegeben, wird die Voreinstellung des Systems benutzt."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
+msgid "sssd-krb5"
+msgstr "sssd-krb5"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:23
+msgid ""
+"This manual page describes the configuration of the Kerberos 5 "
+"authentication backend for <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>. For a detailed "
+"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
+"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page."
+msgstr ""
+"Diese Handbuchseite beschreibt die Konfiguration des Authentifizierungs-"
+"Backends Kerberos 5 für <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry>. Eine ausführliche Syntax-Referenz "
+"finden Sie im Abschnitt »DATEIFORMAT« der Handbuchseite <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:36
+msgid ""
+"The Kerberos 5 authentication backend contains auth and chpass providers. It "
+"must be paired with an identity provider in order to function properly (for "
+"example, id_provider = ldap). Some information required by the Kerberos 5 "
+"authentication backend must be provided by the identity provider, such as "
+"the user's Kerberos Principal Name (UPN). The configuration of the identity "
+"provider should have an entry to specify the UPN. Please refer to the man "
+"page for the applicable identity provider for details on how to configure "
+"this."
+msgstr ""
+"Das Authentifizierungs-Backend Kerberos 5 enthält Authentifizierungs- und "
+"Chpass-Anbieter. Es muss mit einem Identitätsanbieter verbunden werden, "
+"damit es sauber läuft (zum Beispiel »id_provider = ldap«). Einige vom "
+"Kerberos-5-Authentifizierungs-Backend benötigten Informationen wie der "
+"»Kerberos Principal Name« (UPN) des Benutzers müssen durch den "
+"Identitätsanbieter bereitgestellt werden. Die Konfiguration des "
+"Identitätsanbieters sollte einen Eintrag haben, der den UPN angibt. "
+"Einzelheiten, wie dies konfiguriert wird, finden Sie in der Handbuchseite "
+"des entsprechenden Identitätsanbieters."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:47
+msgid ""
+"This backend also provides access control based on the .k5login file in the "
+"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
+"Please note that an empty .k5login file will deny all access to this user. "
+"To activate this feature, use 'access_provider = krb5' in your SSSD "
+"configuration."
+msgstr ""
+"Dieses Backend stellt ebenso eine Zugriffssteuerung bereit, die auf der "
+"Datei .k5login im Home-Verzeichnis des Benutzers basiert. Weitere "
+"Einzelheiten finden Sie unter <citerefentry> <refentrytitle>.k5login</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>. Bitte beachten Sie, "
+"dass eine leere .k5login-Datei jegliche Zugriffe durch diesen Benutzer "
+"verbietet. Verwenden Sie »access_provider = krb5« in Ihrer SSSD-"
+"Konfiguration, um diese Funktionalität zu aktivieren."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:55
+msgid ""
+"In the case where the UPN is not available in the identity backend, "
+"<command>sssd</command> will construct a UPN using the format "
+"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
+msgstr ""
+"Im Fall, dass UPN nicht im Identitäts-Backend verfügbar ist, wird "
+"<command>sssd</command> mittels des Formats <replaceable>Benutzername</"
+"replaceable>@<replaceable>Krb5_Realm</replaceable> einen UPN konstruieren."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:77
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect, in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled; for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+"gibt eine durch Kommata getrennte Liste von IP-Adressen oder Rechnernamen "
+"der Kerberos-Server in der Reihenfolge an, in der sich SSSD mit ihnen "
+"verbinden soll. Weitere Informationen über Ausfallsicherung und Redundanz "
+"finden Sie im Abschnitt »AUSFALLSICHERUNG«. An die Adressen oder "
+"Rechnernamen kann eine optionale Portnummer (der ein Doppelpunkt "
+"vorangestellt ist) angehängt werden. Falls dies leer gelassen wurde, wird "
+"die Dienstsuche aktiviert. Weitere Informationen finden Sie im Abschnitt "
+"»DIENSTSUCHE«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:106
+msgid ""
+"The name of the Kerberos realm. This option is required and must be "
+"specified."
+msgstr ""
+"der Name des Kerberos-Realms. Diese Option wird benötigt und muss angegeben "
+"werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:113
+msgid "krb5_kpasswd, krb5_backup_kpasswd (string)"
+msgstr "krb5_kpasswd, krb5_backup_kpasswd (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:116
+msgid ""
+"If the change password service is not running on the KDC, alternative "
+"servers can be defined here. An optional port number (preceded by a colon) "
+"may be appended to the addresses or hostnames."
+msgstr ""
+"Falls der Dienst zum Ändern von Passwörtern auf der "
+"Schlüsselverwaltungszentrale (KDC) nicht läuft, können hier alternative "
+"Server definiert werden. An die Adressen oder Rechnernamen kann eine "
+"optionale Portnummer (der ein Doppelpunkt vorangestellt ist) angehängt "
+"werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:122
+msgid ""
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. NOTE: Even if there are no more kpasswd "
+"servers to try, the backend is not switched to operate offline if "
+"authentication against the KDC is still possible."
+msgstr ""
+"Weitere Informationen über Ausfallsicherung und Redundanz finden Sie im "
+"Abschnitt »AUSFALLSICHERUNG«. HINWEIS: Selbst wenn es keine weiteren "
+"»kpasswd«-Server mehr auszuprobieren gibt, wird das Backend nicht offline "
+"gehen, da eine Authentifizierung gegen die Schlüsselverwaltungszentrale "
+"(KDC) immer noch möglich ist."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:129
+msgid "Default: Use the KDC"
+msgstr "Voreinstellung: KDC benutzen"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:135
+msgid "krb5_ccachedir (string)"
+msgstr "krb5_ccachedir (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:138
+msgid ""
+"Directory to store credential caches. All the substitution sequences of "
+"krb5_ccname_template can be used here, too, except %d and %P. If the "
+"directory does not exist, it will be created. If %u, %U, %p or %h are used, "
+"a private directory belonging to the user is created. Otherwise, a public "
+"directory with restricted deletion flag (aka sticky bit, as described in "
+"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
+"</citerefentry> for details) is created."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:152
+msgid "Default: /tmp"
+msgstr "Voreinstellung: /tmp"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:158
+msgid "krb5_ccname_template (string)"
+msgstr "krb5_ccname_template (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:174
+msgid "login UID"
+msgstr "Anmelde-UID"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:177
+msgid "%p"
+msgstr "%p"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:178
+msgid "principal name"
+msgstr "Principal-Name"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:182
+msgid "%r"
+msgstr "%r"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:183
+msgid "realm name"
+msgstr "Realm-Name"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:186
+msgid "%h"
+msgstr "%h"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:187
+msgid "home directory"
+msgstr "Home-Verzeichnis"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:192
+#, fuzzy
+#| msgid "value of krb5_ccachedir"
+msgid "value of krb5ccache_dir"
+msgstr "Wert von krb5_ccachedir"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:197
+msgid "%P"
+msgstr "%P"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:198
+msgid "the process ID of the SSSD client"
+msgstr "die Prozess-ID des SSSD-Clients"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:161
+#, fuzzy
+#| msgid ""
+#| "Location of the user's credential cache. Three credential cache types are "
+#| "currently supported: <quote>FILE</quote>, <quote>DIR</quote> and "
+#| "<quote>KEYRING:persistent</quote>. The cache can be specified either as "
+#| "<replaceable>TYPE:RESIDUAL</replaceable>, or as an absolute path, which "
+#| "implies the <quote>FILE</quote> type. In the template, the following "
+#| "sequences are substituted: <placeholder type=\"variablelist\" id=\"0\"/> "
+#| "If the template ends with 'XXXXXX' mkstemp(3) is used to create a unique "
+#| "filename in a safe way."
+msgid ""
+"Location of the user's credential cache. Two credential cache types are "
+"currently supported: <quote>FILE</quote> and <quote>DIR</quote>. The cache "
+"can be specified either as <replaceable>TYPE:RESIDUAL</replaceable>, or as "
+"an absolute path, which implies the <quote>FILE</quote> type. In the "
+"template, the following sequences are substituted: <placeholder type="
+"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
+"used to create a unique filename in a safe way."
+msgstr ""
+"Der Ort für die Zwischenspeicherung der Anmeldedaten des Benutzers. Drei "
+"Zwischenspeichertypen werden derzeit unterstützt: <quote>FILE</quote>, "
+"<quote>DIR</quote> und <quote>KEYRING:persistent</quote>. Der "
+"Zwischenspeicher kann entweder als <replaceable>TYP:REST</replaceable> oder "
+"als absoluter Pfad angegeben werden, wobei Letzteres den Typ <quote>FILE</"
+"quote> beinhaltet. In der Schablone werden die folgenden Sequenzen ersetzt: "
+"<placeholder type=\"variablelist\" id=\"0\"/> Falls die Vorlage mit »XXXXXX« "
+"endet, wird mkstemp(3) verwendet, um auf sichere Weise einen eindeutigen "
+"Dateinamen zu erzeugen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:212
+msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:218
+msgid "krb5_auth_timeout (integer)"
+msgstr "krb5_auth_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:221
+msgid ""
+"Timeout in seconds after an online authentication request or change password "
+"request is aborted. If possible, the authentication request is continued "
+"offline."
+msgstr ""
+"Zeitüberschreitung in Sekunden, nach der eine Online-Anfrage zur "
+"Authentifizierung oder Passwortänderung gescheitert ist. Falls möglich, wird "
+"die Authentifizierung offline fortgesetzt."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:235
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed. The keytab is checked for entries sequentially, and the first entry "
+"with a matching realm is used for validation. If no entry matches the realm, "
+"the last entry in the keytab is used. This process can be used to validate "
+"environments using cross-realm trust by placing the appropriate keytab entry "
+"as the last entry or the only entry in the keytab file."
+msgstr ""
+"prüft mit Hilfe von »krb5_keytab«, ob das erhaltene TGT keine Täuschung ist. "
+"Die Einträge der Keytab werden der Reihe nach kontrolliert und der erste "
+"Eintrag mit einem passenden Realm wird für die Überprüfung benutzt. Falls "
+"keine Einträge dem Realm entsprechen, wird der letzte Eintrag der Keytab "
+"verwendet. Dieser Prozess kann zur Überprüfung von Umgebungen mittels Realm-"
+"übergreifendem Vertrauen benutzt werden, indem der dazugehörige Keytab-"
+"Eintrag als letzter oder einziger Eintrag in der Keytab-Datei abgelegt wird."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:250
+msgid "krb5_keytab (string)"
+msgstr "krb5_keytab (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:253
+msgid ""
+"The location of the keytab to use when validating credentials obtained from "
+"KDCs."
+msgstr ""
+"der Speicherort der Keytab, der bei der Überprüfung von Berechtigungen "
+"benutzt wird, die von Schlüsselverwaltungszentralen (KDCs) stammen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:257
+msgid "Default: /etc/krb5.keytab"
+msgstr "Voreinstellung: /etc/krb5.keytab"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:263
+msgid "krb5_store_password_if_offline (boolean)"
+msgstr "krb5_store_password_if_offline (Boolesch)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:266
+msgid ""
+"Store the password of the user if the provider is offline and use it to "
+"request a TGT when the provider comes online again."
+msgstr ""
+"speichert das Passwort des Benutzers, falls der Anbieter offline ist, und "
+"benutzt es zur Abfrage des TGTs, wenn der Anbieter wieder online geht."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:271
+msgid ""
+"NOTE: this feature is only available on Linux. Passwords stored in this way "
+"are kept in plaintext in the kernel keyring and are potentially accessible "
+"by the root user (with difficulty)."
+msgstr ""
+"HINWEIS: Diese Funktionalität ist nur auf Linux verfügbar. Passwörter, die "
+"auf diese Weise gespeichert wurden, werden im Klartext im Schlüsselbund des "
+"Kernels aufbewahrt. Darauf kann unter Umständen (mit Mühe) durch den "
+"Benutzer Root zugegriffen werden."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:284
+msgid "krb5_renewable_lifetime (string)"
+msgstr "krb5_renewable_lifetime (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:287
+msgid ""
+"Request a renewable ticket with a total lifetime, given as an integer "
+"immediately followed by a time unit:"
+msgstr ""
+"fordert ein erneuerbares Ticket mit einer Gesamtlebensdauer an. Es wird als "
+"Ganzzahl, der direkt eine Zeiteinheit folgt, angegeben:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:326
+msgid "<emphasis>s</emphasis> for seconds"
+msgstr "<emphasis>s</emphasis> für Sekunden"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:329
+msgid "<emphasis>m</emphasis> for minutes"
+msgstr "<emphasis>m</emphasis> für Minuten"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:298 sssd-krb5.5.xml:332
+msgid "<emphasis>h</emphasis> for hours"
+msgstr "<emphasis>h</emphasis> für Stunden"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:301 sssd-krb5.5.xml:335
+msgid "<emphasis>d</emphasis> for days."
+msgstr "<emphasis>d</emphasis> für Tage"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:304
+msgid "If there is no unit given, <emphasis>s</emphasis> is assumed."
+msgstr ""
+"Falls keine Einheit angegeben ist, wird <emphasis>s</emphasis> angenommen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:308
+msgid ""
+"NOTE: It is not possible to mix units. To set the renewable lifetime to one "
+"and a half hours, use '90m' instead of '1h30m'."
+msgstr ""
+"HINWEIS: Es ist nicht möglich, Einheiten zu mixen. Um die erneuerbare "
+"Lebensdauer auf eineinhalb Stunden zu setzen, verwenden Sie »90m« statt "
+"»1h30m«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:313
+msgid "Default: not set, i.e. the TGT is not renewable"
+msgstr "Voreinstellung: nicht gesetzt, d.h. das TGT ist nicht erneuerbar."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:319
+msgid "krb5_lifetime (string)"
+msgstr "krb5_lifetime (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:322
+#, fuzzy
+#| msgid ""
+#| "Request ticket with a lifetime, given as an integer immediately followed "
+#| "by a time unit:"
+msgid ""
+"Request ticket with a with a lifetime, given as an integer immediately "
+"followed by a time unit:"
+msgstr ""
+"Anforderungsticket mit einer Lebensdauer, angegeben als Ganzzahl, der direkt "
+"eine Zeiteinheit folgt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:338
+msgid "If there is no unit given <emphasis>s</emphasis> is assumed."
+msgstr ""
+"Falls keine Einheit angegeben ist, wird <emphasis>s</emphasis> angenommen."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:342
+msgid ""
+"NOTE: It is not possible to mix units. To set the lifetime to one and a "
+"half hours please use '90m' instead of '1h30m'."
+msgstr ""
+"HINWEIS: Es ist nicht möglich, Einheiten zu mixen. Um die Lebensdauer auf "
+"eineinhalb Stunden zu setzen, verwenden Sie »90m« statt »1h30m«."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:347
+msgid ""
+"Default: not set, i.e. the default ticket lifetime configured on the KDC."
+msgstr ""
+"Voreinstellung: nicht gesetzt, d.h. die Standardlebenszeit des Tickets auf "
+"der Schlüsselverwaltungszentrale (KDC)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:354
+#, fuzzy
+#| msgid "krb5_renew_interval (string)"
+msgid "krb5_renew_interval (integer)"
+msgstr "krb5_renew_interval (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:357
+#, fuzzy
+#| msgid ""
+#| "The time in seconds between two checks if the TGT should be renewed. TGTs "
+#| "are renewed if about half of their lifetime is exceeded, given as an "
+#| "integer immediately followed by a time unit:"
+msgid ""
+"The time in seconds between two checks if the TGT should be renewed. TGTs "
+"are renewed if about half of their lifetime is exceeded."
+msgstr ""
+"die Zeit in Sekunden zwischen zwei Prüfungen, ob das TGT erneuert werden "
+"soll. TGTs werden erneuert, wenn ungefähr die Hälfte ihrer Lebensdauer "
+"überschritten ist. Sie wird als Ganzzahl, der unmittelbar eine Zeiteinheit "
+"folgt, angegeben:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:362
+msgid "If this option is not set or is 0 the automatic renewal is disabled."
+msgstr ""
+"Falls diese Option nicht oder auf 0 gesetzt ist, wird die automatische "
+"Erneuerung deaktiviert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:372
+msgid "krb5_use_fast (string)"
+msgstr "krb5_use_fast (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:375
+msgid ""
+"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
+"authentication. The following options are supported:"
+msgstr ""
+"Schaltet das flexible Authentifizierungs-Sicherheits-Tunneln (FAST) für die "
+"Vorauthentifizierung von Kerberos ein. Die folgenden Optionen werden "
+"unterstützt:"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:380
+msgid ""
+"<emphasis>never</emphasis> use FAST. This is equivalent to not setting this "
+"option at all."
+msgstr ""
+"<emphasis>never</emphasis>: FAST wird nie benutzt. Dies ist so, als ob diese "
+"Einstellung gar nicht gemacht würde."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:384
+msgid ""
+"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
+"continue the authentication without it."
+msgstr ""
+"<emphasis>try</emphasis>: Es wird versucht, FAST zu benutzen. Falls der "
+"Server kein FAST unterstützt, fährt die Authentifizierung ohne fort."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:389
+msgid ""
+"<emphasis>demand</emphasis> to use FAST. The authentication fails if the "
+"server does not require fast."
+msgstr ""
+"<emphasis>demand</emphasis>: Fragt nach, ob FAST benutzt werden soll. Die "
+"Authentifizierung schlägt fehl, falls der Server kein FAST erfordert."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:394
+msgid "Default: not set, i.e. FAST is not used."
+msgstr "Voreinstellung: nicht gesetzt, d.h. FAST wird nicht benutzt"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:397
+msgid "NOTE: a keytab is required to use FAST."
+msgstr "HINWEIS: Zur Benutzung von FAST ist eine Keytab erforderlich."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:400
+msgid ""
+"NOTE: SSSD supports FAST only with MIT Kerberos version 1.8 and later. If "
+"SSSD is used with an older version of MIT Kerberos, using this option is a "
+"configuration error."
+msgstr ""
+"HINWEIS: SSSD unterstützt FAST nur mit MIT-Kerberos-Version 1.8 und neuer. "
+"Falls SSSD mit einer älteren Version von MIT-Kerberos benutzt wird, ist die "
+"Verwendung dieser Option ein Konfigurationsfehler."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:409
+msgid "krb5_fast_principal (string)"
+msgstr "krb5_fast_principal (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:412
+msgid "Specifies the server principal to use for FAST."
+msgstr "gibt den Server-Principal zur Benutzung von FAST an."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:421
+msgid ""
+"Specifies if the host and user principal should be canonicalized. This "
+"feature is available with MIT Kerberos 1.7 and later versions."
+msgstr ""
+"gibt an, ob der Rechner und User-Principal in die kanonische Form gebracht "
+"werden sollen. Diese Funktionalität ist mit MIT-Kerberos 1.7 und neueren "
+"Versionen verfügbar."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:65
+msgid ""
+"If the auth-module krb5 is used in an SSSD domain, the following options "
+"must be used. See the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page, section "
+"<quote>DOMAIN SECTIONS</quote>, for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+"Falls das Authentifizierungsmodul Krb5 in einer SSSD-Domain benutzt wird, "
+"müssen die folgenden Optionen verwendet werden. Einzelheiten über die "
+"Konfiguration einer SSSD-Domain finden Sie im Abschnitt »DOMAIN-ABSCHNITTE« "
+"der Handbuchseite <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry>. <placeholder type=\"variablelist\" "
+"id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:443
+msgid ""
+"The following example assumes that SSSD is correctly configured and FOO is "
+"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
+"example shows only configuration of Kerberos authentication; it does not "
+"include any identity provider."
+msgstr ""
+"Das folgende Beispiel geht davon aus, dass SSSD korrekt konfiguriert wurde "
+"und FOO eine der Domains im Abschnitt <replaceable>[sssd]</replaceable> ist. "
+"Dieses Beispiel zeigt nur die Authentifizierung mit Kerberos, sie umfasst "
+"keine Identitätsanbieter."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-krb5.5.xml:451
+#, no-wrap
+msgid ""
+" [domain/FOO]\n"
+" auth_provider = krb5\n"
+" krb5_server = 192.168.1.1\n"
+" krb5_realm = EXAMPLE.COM\n"
+msgstr ""
+" [domain/FOO]\n"
+" auth_provider = krb5\n"
+" krb5_server = 192.168.1.1\n"
+" krb5_realm = EXAMPLE.COM\n"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
+msgid "sss_groupadd"
+msgstr "sss_groupadd"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupadd.8.xml:16
+msgid "create a new group"
+msgstr "erstellt eine neue Gruppe"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupadd.8.xml:21
+msgid ""
+"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPPE</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupadd.8.xml:32
+msgid ""
+"<command>sss_groupadd</command> creates a new group. These groups are "
+"compatible with POSIX groups, with the additional feature that they can "
+"contain other groups as members."
+msgstr ""
+"<command>sss_groupadd</command> erstellt eine neue Gruppe. Diese Gruppen "
+"sind kompatibel mit POSIX-Gruppen mit der zusätzlichen Funktionalität, dass "
+"sie andere Gruppen als Mitglieder enthalten können."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupadd.8.xml:43 sss_seed.8.xml:88
+msgid ""
+"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
+msgstr ""
+"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupadd.8.xml:48
+msgid ""
+"Set the GID of the group to the value of <replaceable>GID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+"setzt die GID der Gruppe auf den Wert von <replaceable>GID</replaceable>. "
+"Wurde der Wert nicht angegeben, wird er automatisch ausgewählt."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
+msgid "sss_userdel"
+msgstr "sss_userdel"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_userdel.8.xml:16
+msgid "delete a user account"
+msgstr "löscht ein Benutzerkonto"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_userdel.8.xml:21
+msgid ""
+"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_userdel</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>ANMELDUNG</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_userdel.8.xml:32
+msgid ""
+"<command>sss_userdel</command> deletes a user identified by login name "
+"<replaceable>LOGIN</replaceable> from the system."
+msgstr ""
+"<command>sss_userdel</command> löscht einen Benutzer, der durch den "
+"Anmeldenamen <replaceable>ANMELDUNG</replaceable> vom System erkannt wird."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:44
+msgid "<option>-r</option>,<option>--remove</option>"
+msgstr "<option>-r</option>,<option>--remove</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:48
+msgid ""
+"Files in the user's home directory will be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+"Dateien im Home-Verzeichnis des Benutzers werden zusammen mit dem Home-"
+"Verzeichnis selbst und der Mail-Warteschlange des Benutzers entfernt. Dies "
+"setzt die Konfiguration außer Kraft."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:56
+msgid "<option>-R</option>,<option>--no-remove</option>"
+msgstr "<option>-R</option>,<option>--no-remove</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:60
+msgid ""
+"Files in the user's home directory will NOT be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+"Dateien im Home-Verzeichnis des Benutzers werden NICHT zusammen mit dem Home-"
+"Verzeichnis selbst und der Mail-Warteschlange des Benutzers entfernt. Dies "
+"setzt die Konfiguration außer Kraft."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:68
+msgid "<option>-f</option>,<option>--force</option>"
+msgstr "<option>-f</option>,<option>--force</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:72
+msgid ""
+"This option forces <command>sss_userdel</command> to remove the user's home "
+"directory and mail spool, even if they are not owned by the specified user."
+msgstr ""
+"Diese Option erzwingt, dass <command>sss_userdel</command> das Home-"
+"Verzeichnis des Benutzers und die Mail-Warteschlange sogar dann entfernt, "
+"wenn sie dem angegebenen Nutzer nicht gehören."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:80
+msgid "<option>-k</option>,<option>--kick</option>"
+msgstr "<option>-k</option>,<option>--kick</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:84
+msgid "Before actually deleting the user, terminate all his processes."
+msgstr ""
+"beendet, bevor der Benutzer tatsächlich gelöscht wird, alle seine Prozesse."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
+msgid "sss_groupdel"
+msgstr "sss_groupdel"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupdel.8.xml:16
+msgid "delete a group"
+msgstr "löscht eine Gruppe"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupdel.8.xml:21
+msgid ""
+"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPPE</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupdel.8.xml:32
+msgid ""
+"<command>sss_groupdel</command> deletes a group identified by its name "
+"<replaceable>GROUP</replaceable> from the system."
+msgstr ""
+"<command>sss_groupdel</command> löscht eine Gruppe namens "
+"<replaceable>GRUPPE</replaceable> vom System."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
+msgid "sss_groupshow"
+msgstr "sss_groupshow"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupshow.8.xml:16
+msgid "print properties of a group"
+msgstr "gibt die Eigenschaften einer Gruppe aus."
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupshow.8.xml:21
+msgid ""
+"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GRUPPE</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupshow.8.xml:32
+msgid ""
+"<command>sss_groupshow</command> displays information about a group "
+"identified by its name <replaceable>GROUP</replaceable>. The information "
+"includes the group ID number, members of the group and the parent group."
+msgstr ""
+"<command>sss_groupshow</command> zeigt Informationen über eine Gruppe namens "
+"<replaceable>GRUPPE</replaceable> an. Die Informationen umfassen die Gruppen-"
+"ID-Nummer, Mitglieder der Gruppe, sowie die übergeordnete Gruppe."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupshow.8.xml:43
+msgid "<option>-R</option>,<option>--recursive</option>"
+msgstr "<option>-R</option>,<option>--recursive</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupshow.8.xml:47
+msgid ""
+"Also print indirect group members in a tree-like hierarchy. Note that this "
+"also affects printing parent groups - without <option>R</option>, only the "
+"direct parent will be printed."
+msgstr ""
+"gibtt auch indirekte Gruppenmitglieder in einer baumartigen Hierarchie aus. "
+"Beachten Sie, dass dies auch die Ausgabe der übergeordneten Gruppen "
+"beeinflusst – ohne <option>R</option> werden nur die unmittelbar "
+"übergeordneten Gruppen ausgegeben."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
+msgid "sss_usermod"
+msgstr "sss_usermod"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_usermod.8.xml:16
+msgid "modify a user account"
+msgstr "ändert ein Benutzerkonto"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_usermod.8.xml:21
+msgid ""
+"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_usermod</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>ANMELDUNG</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_usermod.8.xml:32
+msgid ""
+"<command>sss_usermod</command> modifies the account specified by "
+"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
+"on the command line."
+msgstr ""
+"<command>sss_usermod</command> ändert das durch <replaceable>ANMELDUNG</"
+"replaceable> angegebene Konto, damit es die auf der Befehlszeile angegebenen "
+"Änderungen widerzuspiegelt."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:60
+msgid "The home directory of the user account."
+msgstr "das Home-Verzeichnis des Benutzerkontos"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:71
+msgid "The user's login shell."
+msgstr "die Anmelde-Shell des Benutzers"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:82
+msgid ""
+"Append this user to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+"hängt diesen Benutzer an die Gruppen an, die durch den Parameter "
+"<replaceable>GRUPPEN</replaceable> angegeben werden. Der Parameter "
+"<replaceable>GRUPPEN</replaceable> ist eine durch Kommata getrennte Liste "
+"von Gruppennamen."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:96
+msgid ""
+"Remove this user from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+"entfernt diesen Benutzer aus Gruppen, die durch den Parameter "
+"<replaceable>GRUPPEN</replaceable> angegeben werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:103
+msgid "<option>-l</option>,<option>--lock</option>"
+msgstr "<option>-l</option>,<option>--lock</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:107
+msgid "Lock the user account. The user won't be able to log in."
+msgstr ""
+"sperrt das Benutzerkonto. Der Benutzer wird sich nicht anmelden können."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:114
+msgid "<option>-u</option>,<option>--unlock</option>"
+msgstr "<option>-u</option>,<option>--unlock</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:118
+msgid "Unlock the user account."
+msgstr "entsperrt das Benutzerkonto."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:129
+msgid "The SELinux user for the user's login."
+msgstr "der SELinux-Benutzer für die Anmeldung des Anwenders"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_cache.8.xml:10 sss_cache.8.xml:15
+msgid "sss_cache"
+msgstr "sss_cache"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_cache.8.xml:16
+msgid "perform cache cleanup"
+msgstr "führt eine Bereinigung des Zwischenspeichers durch."
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_cache.8.xml:21
+msgid ""
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_cache.8.xml:31
+msgid ""
+"<command>sss_cache</command> invalidates records in SSSD cache. Invalidated "
+"records are forced to be reloaded from server as soon as related SSSD "
+"backend is online."
+msgstr ""
+"<command>sss_cache</command> annulliert Datensätze im SSSD-Zwischenspeicher. "
+"Annullierte Datensätze werden zwangsweise neu vom Server geladen, sobald das "
+"zugehörige SSSD-Backend online ist."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:42
+msgid ""
+"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
+msgstr ""
+"<option>-u</option>,<option>--user</option> <replaceable>Anmeldung</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:47
+msgid "Invalidate specific user."
+msgstr "annulliert einen bestimmten Benutzer."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:53
+msgid "<option>-U</option>,<option>--users</option>"
+msgstr "<option>-U</option>,<option>--users</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:57
+msgid ""
+"Invalidate all user records. This option overrides invalidation of specific "
+"user if it was also set."
+msgstr ""
+"annulliert alle Benutzerdatensätze. Diese Option setzt das Annullieren "
+"bestimmter Benutzer außer Kraft, falls es ebenfalls gesetzt war."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:64
+msgid ""
+"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
+msgstr ""
+"<option>-g</option>,<option>--group</option> <replaceable>Gruppe</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:69
+msgid "Invalidate specific group."
+msgstr "annulliert eine bestimmte Gruppe."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:75
+msgid "<option>-G</option>,<option>--groups</option>"
+msgstr "<option>-G</option>,<option>--groups</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:79
+msgid ""
+"Invalidate all group records. This option overrides invalidation of specific "
+"group if it was also set."
+msgstr ""
+"annulliert alle Gruppendatensätze. Diese Option setzt das Annullieren "
+"bestimmter Gruppen außer Kraft, falls es ebenfalls gesetzt war."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:86
+msgid ""
+"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
+"replaceable>"
+msgstr ""
+"<option>-n</option>,<option>--netgroup</option> <replaceable>Netzgruppe</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:91
+msgid "Invalidate specific netgroup."
+msgstr "annulliert eine bestimmte Netzgruppe."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:97
+msgid "<option>-N</option>,<option>--netgroups</option>"
+msgstr "<option>-N</option>,<option>--netgroups</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:101
+msgid ""
+"Invalidate all netgroup records. This option overrides invalidation of "
+"specific netgroup if it was also set."
+msgstr ""
+"annulliert alle Netzgruppendatensätze. Diese Option setzt das Annullieren "
+"bestimmter Netzgruppen außer Kraft, falls es ebenfalls gesetzt war."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:108
+msgid ""
+"<option>-s</option>,<option>--service</option> <replaceable>service</"
+"replaceable>"
+msgstr ""
+"<option>-s</option>,<option>--service</option> <replaceable>Dienst</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:113
+msgid "Invalidate specific service."
+msgstr "annulliert einen bestimmten Dienst."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:119
+msgid "<option>-S</option>,<option>--services</option>"
+msgstr "<option>-S</option>,<option>--services</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:123
+msgid ""
+"Invalidate all service records. This option overrides invalidation of "
+"specific service if it was also set."
+msgstr ""
+"annulliert alle Dienstdatensätze. Diese Option setzt das Annullieren "
+"bestimmter Dienste außer Kraft, falls es ebenfalls gesetzt war."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:130
+msgid ""
+"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
+"replaceable>"
+msgstr ""
+"<option>-a</option>,<option>--autofs-map</option> <replaceable>Autofs-"
+"Abbildung</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:135
+msgid "Invalidate specific autofs maps."
+msgstr "annulliert eine bestimmte Autofs-Abbildung."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:141
+msgid "<option>-A</option>,<option>--autofs-maps</option>"
+msgstr "<option>-A</option>,<option>--autofs-maps</option>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:145
+msgid ""
+"Invalidate all autofs maps. This option overrides invalidation of specific "
+"map if it was also set."
+msgstr ""
+"annulliert alle Autofs-Abbildungen. Diese Option setzt das Annullieren "
+"bestimmter Abbildungen außer Kraft, falls es ebenfalls gesetzt war."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:152
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
+"replaceable>"
+msgstr ""
+"<option>-d</option>,<option>--domain</option> <replaceable>Domain</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:157
+msgid "Restrict invalidation process only to a particular domain."
+msgstr "begrenzt den Annullierungsprozess auf eine bestimmte Domain."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
+msgid "sss_debuglevel"
+msgstr "sss_debuglevel"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_debuglevel.8.xml:16
+msgid "change debug level while SSSD is running"
+msgstr "ändert die Debug-Stufe, während SSSD ausgeführt wird."
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_debuglevel.8.xml:21
+msgid ""
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
+"replaceable></arg>"
+msgstr ""
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'><replaceable>NEUE_DEBUG_STUFE</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_debuglevel.8.xml:32
+msgid ""
+"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
+"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
+"running."
+msgstr ""
+"<command>sss_debuglevel</command> ändert die Debug-Stufe des SSSD-"
+"Überwachungsmonitors und Anbieters auf <replaceable>NEUE_DEBUG_STUFE</"
+"replaceable> während SSSD ausgeführt wird."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_debuglevel.8.xml:59
+msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
+msgstr "<replaceable>NEUE_DEBUG_STUFE</replaceable>"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_seed.8.xml:10 sss_seed.8.xml:15
+msgid "sss_seed"
+msgstr "sss_seed"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_seed.8.xml:16
+msgid "seed the SSSD cache with a user"
+msgstr "füllt den SSSD-Zwischenspeicher mit einem Benutzer"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_seed.8.xml:21
+msgid ""
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>Optionen</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>BENUTZER</"
+"replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:33
+msgid ""
+"<command>sss_seed</command> seeds the SSSD cache with a user entry and "
+"temporary password. If a user entry is already present in the SSSD cache "
+"then the entry is updated with the temporary password."
+msgstr ""
+"<command>sss_seed</command> füllt den SSSD-Zwischenspeicher mit einem "
+"Benutzereintrag und einem temporären Passwort. Falls bereits ein "
+"Benutzereintrag im SSSD-Zwischenspeicher vorhanden ist, wird der Eintrag mit "
+"dem temporären Passwort aktualisiert."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:46
+msgid ""
+"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:51
+msgid ""
+"Provide the name of the domain in which the user is a member of. The domain "
+"is also used to retrieve user information. The domain must be configured in "
+"sssd.conf. The <replaceable>DOMAIN</replaceable> option must be provided. "
+"Information retrieved from the domain overrides what is provided in the "
+"options."
+msgstr ""
+"stellt den Namen der Doamin bereit, in der der Benutzer Mitglied ist. Die "
+"Domain wird auch zur Abfrage von Benutzerinformationen verwendet. Sie muss "
+"in der »sssd.conf« konfiguriert sein. Die Option <replaceable>DOMAIN</"
+"replaceable> muss bereitgestellt werden. Von der Domain geholte "
+"Informationen setzen das, was in den Optionen bereitgestellt wurde, außer "
+"Kraft."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:63
+msgid ""
+"<option>-n</option>,<option>--username</option> <replaceable>USER</"
+"replaceable>"
+msgstr ""
+"<option>-n</option>,<option>--username</option> <replaceable>BENUTZER</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:68
+msgid ""
+"The username of the entry to be created or modified in the cache. The "
+"<replaceable>USER</replaceable> option must be provided."
+msgstr ""
+"der Benutzername des Eintrags, der im Zwischenspeicher erstellt oder "
+"verändert werden soll. Die Option <replaceable>BENUTZER</replaceable> muss "
+"bereitgestellt werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:81
+msgid "Set the UID of the user to <replaceable>UID</replaceable>."
+msgstr "setzt die UID des Benutzers auf <replaceable>UID</replaceable>."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:93
+msgid "Set the GID of the user to <replaceable>GID</replaceable>."
+msgstr "setzt die GID des Benutzers auf <replaceable>GID</replaceable>."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:117
+msgid ""
+"Set the home directory of the user to <replaceable>HOME_DIR</replaceable>."
+msgstr ""
+"setzt das Home-Verzeichnis des Benutzers auf <replaceable>HOME_VERZ</"
+"replaceable>."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:129
+msgid "Set the login shell of the user to <replaceable>SHELL</replaceable>."
+msgstr ""
+"setzt die Anmelde-Shell des Benutzers auf <replaceable>SHELL</replaceable>."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:140
+msgid ""
+"Interactive mode for entering user information. This option will only prompt "
+"for information not provided in the options or retrieved from the domain."
+msgstr ""
+"interaktiver Modus zur Eingabe von Benutzerinformationen. Diese Option wird "
+"nur nach Informationen fragen, die nicht von den Optionen bereitgestellt "
+"oder in der Domain geholt werden."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:148
+msgid ""
+"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
+"replaceable>"
+msgstr ""
+"<option>-p</option>,<option>--password-file</option> "
+"<replaceable>PASSWORTDATEI</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:153
+msgid ""
+"Specify file to read user's password from. (if not specified password is "
+"prompted for)"
+msgstr ""
+"gibt die Datei an, aus der das Passwort des Benutzers gelesen wird (ist es "
+"nicht angegeben, wird nach dem Passwort gefragt)."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:165
+msgid ""
+"The length of the password (or the size of file specified with -p or --"
+"password-file option) must be less than or equal to PASS_MAX bytes (64 bytes "
+"on systems with no globally-defined PASS_MAX value)."
+msgstr ""
+"Die Länge des Passworts (oder die Größe der mit der Option -p oder --"
+"password-file angegebenen Datei) muss kleiner oder gleich PASS_MAX Byte sein "
+"(64 Byte auf Systemen ohne global definiertem Wert für PASS_MAX)."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
+msgid "sss_ssh_authorizedkeys"
+msgstr "sss_ssh_authorizedkeys"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
+msgid "1"
+msgstr "1"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_authorizedkeys.1.xml:16
+msgid "get OpenSSH authorized keys"
+msgstr "holt autorisierte OpenSSH-Schlüssel"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_authorizedkeys.1.xml:21
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>USER</replaceable></arg>"
+msgstr ""
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>Optionen</replaceable> </arg> <arg "
+"choice='plain'><replaceable>BENUTZER</replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:32
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
+"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
+"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> for more information)."
+msgstr ""
+"<command>sss_ssh_authorizedkeys</command> beschafft öffentliche SSH-"
+"Schlüssel für den Anwender <replaceable>BENUTZER</replaceable> und gibt sie "
+"im OpenSSH-Format »authorized_keys« aus (weitere Informationen finden Sie im "
+"Abschnitt »AUTHORIZED_KEYS-DATEIFORMAT« von "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry>)."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:41
+msgid ""
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
+"command> for public key user authentication if it is compiled with support "
+"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
+"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> options."
+msgstr ""
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> kann so konfiguriert werden, dass es "
+"<command>sss_ssh_authorizedkeys</command> zur Authentifizierung mit "
+"öffentlichen Schlüsseln benutzt, falls es entweder mit Unterstützung für die "
+"Optionen »AuthorizedKeysCommand« oder »PubkeyAgent« der <citerefentry> "
+"<refentrytitle>sshd_config</refentrytitle> <manvolnum>5</manvolnum></"
+"citerefentry> kompiliert wurde."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:58
+#, no-wrap
+msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
+msgstr "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:51
+msgid ""
+"If <quote>AuthorizedKeysCommand</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by putting the following directive "
+"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+"Falls »AuthorizedKeysCommand« unterstützt wird, kann "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> durch Setzen der folgenden Richtlinie in <citerefentry> "
+"<refentrytitle>sshd_config</refentrytitle> <manvolnum>5</manvolnum></"
+"citerefentry> zur Verwendung konfiguriert werden: <placeholder type="
+"\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:69
+#, no-wrap
+msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
+msgstr "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:62
+msgid ""
+"If <quote>PubkeyAgent</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by using the following directive "
+"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
+msgstr ""
+"Falls »PubkeyAgent« unterstützt wird, kann "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> durch Setzen der folgenden Richtlinie in <citerefentry> "
+"<refentrytitle>sshd_config</refentrytitle> <manvolnum>5</manvolnum></"
+"citerefentry> zu seiner Verwendung konfiguriert werden: <placeholder type="
+"\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_authorizedkeys.1.xml:84
+msgid ""
+"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+"sucht nach öffentlichen Schlüsseln von Benutzern in der SSSD-Domain "
+"<replaceable>DOMAIN</replaceable>."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
+msgid "sss_ssh_knownhostsproxy"
+msgstr "sss_ssh_knownhostsproxy"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_knownhostsproxy.1.xml:16
+msgid "get OpenSSH host keys"
+msgstr "holt OpenSSH-Rechnerschlüssel"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_knownhostsproxy.1.xml:21
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
+"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
+msgstr ""
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>Optionen</replaceable> </arg> <arg "
+"choice='plain'><replaceable>RECHNER</replaceable></arg> <arg "
+"choice='opt'><replaceable>PROXY_BEFEHL</replaceable></arg>"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:33
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
+"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
+"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
+"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> for more information) <filename>/var/lib/sss/"
+"pubconf/known_hosts</filename> and estabilishes connection to the host."
+msgstr ""
+"<command>sss_ssh_knownhostsproxy</command> beschafft öffentliche SSH-"
+"Schlüssel für den Rechner <replaceable>RECHNER</replaceable> und speichert "
+"sie in einer benutzerdefinierten OpenSSH-»known_hosts«-Datei (weitere "
+"Informationen finden Sie im Abschnitt »SSH_KNOWN_HOSTS-DATEIFORMAT« von "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry>) <filename>/var/lib/sss/pubconf/known_hosts</filename> und "
+"stellt eine Verbindung zum Rechner her."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:43
+msgid ""
+"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
+"create the connection to the host instead of opening a socket."
+msgstr ""
+"Falls ein <replaceable>PROXY_BEFEHL</replaceable> angegeben wurde, wird er "
+"zum Erstellen der Verbindung mit dem Rechner benutzt, anstatt ein Socket zu "
+"öffnen."
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_knownhostsproxy.1.xml:55
+#, no-wrap
+msgid ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
+msgstr ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:48
+msgid ""
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
+"command> for host key authentication by using the following directives for "
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> kann durch Verwendung der folgenden Richtlinien für die "
+"Konfiguration von <citerefentry><refentrytitle>ssh</refentrytitle> "
+"<manvolnum>1</manvolnum></citerefentry> so eingerichtet werden, dass es "
+"<command>sss_ssh_knownhostsproxy</command> zur Authentifizierung des "
+"Rechnerschlüssels benutzt: <placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_ssh_knownhostsproxy.1.xml:66
+msgid ""
+"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
+msgstr ""
+"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:71
+msgid ""
+"Use port <replaceable>PORT</replaceable> to connect to the host. By "
+"default, port 22 is used."
+msgstr ""
+"benutzt Port <replaceable>PORT</replaceable> zur Verbindung mit dem Rechner. "
+"Standardmäßig wird Port 22 verwendet."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:83
+msgid ""
+"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+"sucht in der SSSD-Domain nach <replaceable>DOMAIN</replaceable> öffentlichen "
+"Schlüsseln für den Rechner."
+
+#. type: Content of: <refsect1><title>
+#: include/service_discovery.xml:2
+msgid "SERVICE DISCOVERY"
+msgstr "DIENSTSUCHE"
+
+#. type: Content of: <refsect1><para>
+#: include/service_discovery.xml:4
+msgid ""
+"The service discovery feature allows back ends to automatically find the "
+"appropriate servers to connect to using a special DNS query. This feature is "
+"not supported for backup servers."
+msgstr ""
+"Die Dienstsuchfunktionalität ermöglicht es Backends, automatisch mit Hilfe "
+"einer speziellen DNS-Abfrage geeignete Server zu suchen, mit denen sie sich "
+"verbinden können. Diese Funktionalität wird nicht für Datensicherungs-Server "
+"unterstützt."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:9 include/ldap_id_mapping.xml:57
+msgid "Configuration"
+msgstr "Konfiguration"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:11
+msgid ""
+"If no servers are specified, the back end automatically uses service "
+"discovery to try to find a server. Optionally, the user may choose to use "
+"both fixed server addresses and service discovery by inserting a special "
+"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
+"preference is maintained. This feature is useful if, for example, the user "
+"prefers to use service discovery whenever possible, and fall back to a "
+"specific server when no servers can be discovered using DNS."
+msgstr ""
+"Falls keine Server angegeben wurden, benutzt das Backend die Dienstsuche, um "
+"einen Server zu finden. Wahlweise kann der Benutzer sowohl feste Server-"
+"Adressen als auch die Dienstsuche durch Eingabe des speziellen "
+"Schlüsselworts »_srv_« in der Server-Liste auswählen. Die bevorzugte "
+"Reihenfolge wird verwaltet. Diese Funktionalität ist zum Beispiel nützlich, "
+"falls der Anwender es vorzieht, die Dienstsuche zu verwenden, wann immer "
+"dies möglich ist, und auf einen bestimmten Server zurückzugreifen, wenn "
+"mittels DNS keine Server gefunden werden."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:23
+msgid "The domain name"
+msgstr "Der Domain-Name"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:25
+msgid ""
+"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for more details."
+msgstr ""
+"Weitere Einzelheiten finden Sie in der Handbuchseite <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> beim Parameter »dns_discovery_domain«."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:35
+msgid "The protocol"
+msgstr "Das Protokoll"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:37
+msgid ""
+"The queries usually specify _tcp as the protocol. Exceptions are documented "
+"in respective option description."
+msgstr ""
+"Die Abfragen geben als Protokoll üblicherweise »_tcp« an. Ausnahmen sind in "
+"der Beschreibung der entsprechenden Option dokumentiert."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:42
+msgid "See Also"
+msgstr "Siehe auch"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:44
+msgid ""
+"For more information on the service discovery mechanism, refer to RFC 2782."
+msgstr ""
+"Weitere Informationen über den Dienstsuchmechanismus finden Sie in RFC 2782."
+
+#. type: Content of: outside any tag (error?)
+#: include/upstream.xml:1
+msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
+msgstr "<placeholder type=\"refentryinfo\" id=\"0\"/>"
+
+#. type: Content of: <refsect1><title>
+#: include/failover.xml:2
+msgid "FAILOVER"
+msgstr "AUSFALLSICHERUNG"
+
+#. type: Content of: <refsect1><para>
+#: include/failover.xml:4
+msgid ""
+"The failover feature allows back ends to automatically switch to a different "
+"server if the current server fails."
+msgstr ""
+"Die Ausfallsicherungsfunktionalität ermöglicht es, dass Backends automatisch "
+"auf einen anderen Server wechseln, falls der aktuelle versagt."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:8
+msgid "Failover Syntax"
+msgstr "AUSFALLSICHERUNGSSYNTAX"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:10
+msgid ""
+"The list of servers is given as a comma-separated list; any number of spaces "
+"is allowed around the comma. The servers are listed in order of preference. "
+"The list can contain any number of servers."
+msgstr ""
+"Die Server werden als durch Kommata getrennte Liste angegeben. Um das Komma "
+"herum ist eine beliebige Anzahl von Leerzeichen erlaubt. Die Server werden "
+"in Reihenfolge der Bevorzugung aufgeführt. Die Liste kann eine beliebige "
+"Anzahl von Servern enthalten."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:16
+msgid ""
+"For each failover-enabled config option, two variants exist: "
+"<emphasis>primary</emphasis> and <emphasis>backup</emphasis>. The idea is "
+"that servers in the primary list are preferred and backup servers are only "
+"searched if no primary servers can be reached. If a backup server is "
+"selected, a timeout of 31 seconds is set. After this timeout SSSD will "
+"periodically try to reconnect to one of the primary servers. If it succeeds, "
+"it will replace the current active (backup) server."
+msgstr ""
+"Von jeder Konfigurationsoption mit aktivierter Ausfallsicherung existieren "
+"zwei Varianten: <emphasis>primary</emphasis> und <emphasis>backup</"
+"emphasis>. Die Idee dahinter ist, dass Server in der Liste »primary« "
+"bevorzugt werden und nur nach »backup«-Servern gesucht wird, falls kein "
+"»primary«-Server erreichbar ist. Falls ein »backup«-Server ausgewählt wird, "
+"wird eine Dauer von 31 Sekunden bis zur Zeitüberschreitung festgelegt. Nach "
+"dieser Zeit wird SSSD periodisch versuchen, sich mit einem der primären "
+"Server zu verbinden. Ist dies erfolgreich, wird es den derzeit aktiven "
+"(»backup«-)Server ersetzen."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:27
+msgid "The Failover Mechanism"
+msgstr "Der Ausfallsicherungsmechanismus"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:29
+msgid ""
+"The failover mechanism distinguishes between a machine and a service. The "
+"back end first tries to resolve the hostname of a given machine; if this "
+"resolution attempt fails, the machine is considered offline. No further "
+"attempts are made to connect to this machine for any other service. If the "
+"resolution attempt succeeds, the back end tries to connect to a service on "
+"this machine. If the service connection attempt fails, then only this "
+"particular service is considered offline and the back end automatically "
+"switches over to the next service. The machine is still considered online "
+"and might still be tried for another service."
+msgstr ""
+"Der Ausfallsicherungsmechanismus unterscheidet zwischen einer Maschine und "
+"einem Dienst. Das Backend versucht zuerst, den Rechnernamen der angegebenen "
+"Maschine aufzulösen. Falls dieser Versuch scheitert, wird davon ausgegangen, "
+"dass die Maschine offline ist und sie auch für keinen anderen Dienst zur "
+"Verfügung steht. Kann der den Namen erfolgreich aufgelöst werden, versucht "
+"das Backend, sich mit einem Dienst auf dieser Maschine zu verbinden. Ist das "
+"nicht möglich, dann wird nur dieser bestimmte Dienst als offline angesehen "
+"und das Backend wechselt automatisch weiter zum nächsten. Die Maschine wird "
+"weiterhin als online betrachtet und kann immer noch für andere Dienste "
+"herangezogen werden."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:42
+msgid ""
+"Further connection attempts are made to machines or services marked as "
+"offline after a specified period of time; this is currently hard coded to 30 "
+"seconds."
+msgstr ""
+"Weitere Verbindungsversuche zu Maschinen oder Diensten, die als offline "
+"gekennzeichnet sind, werden erst nach einer angegebenen Zeitspanne "
+"unternommen. Diese ist derzeit hart auf 30 Sekunden codiert."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:47
+msgid ""
+"If there are no more machines to try, the back end as a whole switches to "
+"offline mode, and then attempts to reconnect every 30 seconds."
+msgstr ""
+"Falls es weitere Maschinen durchzuprobieren gibt, wechselt das Backend als "
+"Ganzes in den Offline-Modus und versucht dann alle 30 Sekunden, sich erneut "
+"zu verbinden."
+
+#. type: Content of: <refsect1><title>
+#: include/ldap_id_mapping.xml:2
+msgid "ID MAPPING"
+msgstr "ID-ABBILDUNG"
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:4
+msgid ""
+"The ID-mapping feature allows SSSD to act as a client of Active Directory "
+"without requiring administrators to extend user attributes to support POSIX "
+"attributes for user and group identifiers."
+msgstr ""
+"Die ID-Abbildungsfunktionalität ermöglicht es SSSD, als Client eines Active "
+"Directorys zu agieren, ohne dass Administratoren Benutzerattribute erweitern "
+"müssen, damit POSIX-Attribute für Benutzer- und Gruppenkennzeichner "
+"unterstützt werden."
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:9
+msgid ""
+"NOTE: When ID-mapping is enabled, the uidNumber and gidNumber attributes are "
+"ignored. This is to avoid the possibility of conflicts between automatically-"
+"assigned and manually-assigned values. If you need to use manually-assigned "
+"values, ALL values must be manually-assigned."
+msgstr ""
+"HINWEIS: Wenn ID-Abbildung aktiviert ist, werden die Attribute »uidNumber« "
+"und »gidNumber« ignoriert. Dies geschieht, um mögliche Konflikte zwischen "
+"automatisch und manuell zugewiesenen Werten zu vermeiden. Falls Sie manuell "
+"zugewiesene Werte benutzen müssen, müssen Sie ALLE Werte manuell zuweisen."
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/ldap_id_mapping.xml:17
+msgid "Mapping Algorithm"
+msgstr "Abbildungsalgorithmus"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:19
+msgid ""
+"Active Directory provides an objectSID for every user and group object in "
+"the directory. This objectSID can be broken up into components that "
+"represent the Active Directory domain identity and the relative identifier "
+"(RID) of the user or group object."
+msgstr ""
+"Active Directory stellt für jedes Benutzer- und Gruppenobjekt im Verzeichnis "
+"eine »objectSID« bereit. Diese »objectSID« kann in Bestandteile zerlegt "
+"werden, die die Active-Directory-Domain-Identität und den relativen "
+"Bezeichner (RID) des Benutzer- oder Gruppenobjekts darstellen."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:25
+msgid ""
+"The SSSD ID-mapping algorithm takes a range of available UIDs and divides it "
+"into equally-sized component sections - called \"slices\"-. Each slice "
+"represents the space available to an Active Directory domain."
+msgstr ""
+"Der ID-Abbildungsalgorithmus von SSSD nimmt einen Bereich verfügbarer UIDs "
+"und teilt sie in gleich große Bestandteile, »Slices« genannt. Jeder Slice "
+"steht für den verfügbaren Speicher einer Active-Directory-Domain."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:31
+msgid ""
+"When a user or group entry for a particular domain is encountered for the "
+"first time, the SSSD allocates one of the available slices for that domain. "
+"In order to make this slice-assignment repeatable on different client "
+"machines, we select the slice based on the following algorithm:"
+msgstr ""
+"Wenn ein Benutzer- oder Gruppeneintrag für eine bestimmt Domain zum ersten "
+"Mal vorgefunden wird, reserviert der SSSD einen der verfügbaren Slices für "
+"diese Domain. Um eine Slice-Zuteilung auf verschiedenen Client-Maschinen "
+"wiederholbar zu machen, wählen wir den Slice, der auf dem folgenden "
+"Algorithmus basiert:"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:38
+msgid ""
+"The SID string is passed through the murmurhash3 algorithm to convert it to "
+"a 32-bit hashed value. We then take the modulus of this value with the total "
+"number of available slices to pick the slice."
+msgstr ""
+"Die Zeichenkette durchläuft den Algorithmus Murmurhash3, um sie in einen 32-"
+"Bit-Hash-Wert umzuwandeln. Dann wird der Betrag dieses Werts mit der "
+"Gesamtzahl verfügbarer Slices genommen, um den Slice auszusuchen."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:44
+msgid ""
+"NOTE: It is possible to encounter collisions in the hash and subsequent "
+"modulus. In these situations, we will select the next available slice, but "
+"it may not be possible to reproduce the same exact set of slices on other "
+"machines (since the order that they are encountered will determine their "
+"slice). In this situation, it is recommended to either switch to using "
+"explicit POSIX attributes in Active Directory (disabling ID-mapping) or "
+"configure a default domain to guarantee that at least one is always "
+"consistent. See <quote>Configuration</quote> for details."
+msgstr ""
+"HINWEIS: Es ist möglich, dass Kollisionen zwischen dem Hash und "
+"nachfolgenden Beträgen auftreten. In diesen Situationen werden wir den "
+"nächsten verfügbaren Slice auswählen, aber es ist wahrscheinlich nicht "
+"möglich, den genau gleichen Satz von Slices auf anderen Maschinen zu "
+"reproduzieren (da die Reihenfolge, in der sie vorgefunden werden, ihren "
+"Slice bestimmt). In dieser Situtation wird empfohlen, entweder auf die "
+"Verwendung expliziter POSIX-Attribute in Active Directory zu wechseln (ID-"
+"Abbildung deaktivieren) oder eine Standard-Domain zu konfigurieren, um "
+"sicherzustellen, dass wenigstens eine immer beständig ist. Einzelheiten "
+"finden Sie unter »Konfiguration«."
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:59
+msgid ""
+"Minimum configuration (in the <quote>[domain/DOMAINNAME]</quote> section):"
+msgstr "Minimalkonfiguration (im Abschnitt »[domain/DOMAINNAME]«):"
+
+#. type: Content of: <refsect1><refsect2><para><programlisting>
+#: include/ldap_id_mapping.xml:64
+#, no-wrap
+msgid ""
+"ldap_id_mapping = True\n"
+"ldap_schema = ad\n"
+msgstr ""
+"ldap_id_mapping = True\n"
+"ldap_schema = ad\n"
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:69
+msgid ""
+"The default configuration results in configuring 10,000 slices, each capable "
+"of holding up to 200,000 IDs, starting from 10,001 and going up to "
+"2,000,100,000. This should be sufficient for most deployments."
+msgstr ""
+"Die Standardkonfiguration führt dazu, dass 10.000 Slices konfiguriert "
+"werden, von denen jeder in der Lage ist, 200.000 IDs zu beinhalten, "
+"beginnend bei 10.001 und endend bei 2.000.100.000. Dies sollte für die "
+"meisten Bereitstellungen ausreichen."
+
+#. type: Content of: <refsect1><refsect2><refsect3><title>
+#: include/ldap_id_mapping.xml:75
+msgid "Advanced Configuration"
+msgstr "Fortgeschrittene Konfiguration"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:78
+msgid "ldap_idmap_range_min (integer)"
+msgstr "ldap_idmap_range_min (Ganzzahl)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:81
+msgid ""
+"Specifies the lower bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+"gibt die Untergrenze des Bereichs von POSIX-IDs an, der zum Abbilden von "
+"Active-Directory-Benutzern und Gruppen-SIDs benutzt wird."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:85
+msgid ""
+"NOTE: This option is different from <quote>min_id</quote> in that "
+"<quote>min_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>min_id</"
+"quote> be less-than or equal to <quote>ldap_idmap_range_min</quote>"
+msgstr ""
+"HINWEIS: Diese Option unterscheidet sich von »min_id«, wobei »min_id« als "
+"Filter für die Ausgabe von Anfragen an diese Domain agiert, wohingegen diese "
+"Option den Bereich der ID-Zuweisung steuert. Dies ist ein feiner "
+"Unterschied, aber es wäre ein allgemein guter Ratschlag, dass »min_id« "
+"kleiner oder gleich »ldap_idmap_range_min« sein sollte."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:95 include/ldap_id_mapping.xml:131
+msgid "Default: 200000"
+msgstr "Voreinstellung: 200000"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:100
+msgid "ldap_idmap_range_max (integer)"
+msgstr "ldap_idmap_range_max (Ganzzahl)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:103
+msgid ""
+"Specifies the upper bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+"gibt die Obergrenze des Bereichs von POSIX-IDs an, der zum Abbilden von "
+"Active-Directory-Benutzern und Gruppen-SIDs benutzt wird."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:107
+msgid ""
+"NOTE: This option is different from <quote>max_id</quote> in that "
+"<quote>max_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>max_id</"
+"quote> be greater-than or equal to <quote>ldap_idmap_range_max</quote>"
+msgstr ""
+"HINWEIS: Diese Option unterscheidet sich von »max_id« wobei »max_id« als "
+"Filter für die Ausgabe von Anfragen an diese Domain agiert, wohingegen diese "
+"Option den Bereich der ID-Zuweisung steuert. Dies ist ein feiner "
+"Unterschied, aber es wäre ein allgemein guter Ratschlag, dass »max_id« "
+"größer oder gleich »ldap_idmap_range_max« sein sollte."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:117
+msgid "Default: 2000200000"
+msgstr "Voreinstellung: 2000200000"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:122
+msgid "ldap_idmap_range_size (integer)"
+msgstr "ldap_idmap_range_size (Ganzzahl)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:125
+msgid ""
+"Specifies the number of IDs available for each slice. If the range size "
+"does not divide evenly into the min and max values, it will create as many "
+"complete slices as it can."
+msgstr ""
+"gibt die Anzahl der für jeden Slice verfügbaren IDs an. Falls sich die "
+"Bereichsgröße nicht gleichmäßig in die minimalen und maximalen Werte teilen "
+"lässt, werden so viele komplette Slices wie möglich erstellt."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:136
+msgid "ldap_idmap_default_domain_sid (string)"
+msgstr "ldap_idmap_default_domain_sid (Zeichenkette)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:139
+msgid ""
+"Specify the domain SID of the default domain. This will guarantee that this "
+"domain will always be assigned to slice zero in the ID map, bypassing the "
+"murmurhash algorithm described above."
+msgstr ""
+"gibt die Domain-SID der Standard-Domain an. Dies wird sicherstellen, dass "
+"diese Domain immer dem Slice null im ID-Abbild zugeordnet wird. Dabei wird "
+"der oben beschriebene Murmurhash-Algorithmus umgangen."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:150
+msgid "ldap_idmap_default_domain (string)"
+msgstr "ldap_idmap_default_domain (Zeichenkette)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:153
+msgid "Specify the name of the default domain."
+msgstr "gibt den Namen der Standard-Domain an."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:161
+msgid "ldap_idmap_autorid_compat (boolean)"
+msgstr "ldap_idmap_autorid_compat (Boolesch)"
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:164
+msgid ""
+"Changes the behavior of the ID-mapping algorithm to behave more similarly to "
+"winbind's <quote>idmap_autorid</quote> algorithm."
+msgstr ""
+"ändert das Verhalten des ID-Abbildungsalgorithmus so, dass es dem "
+"Algorithmus »idmap_autorid« von Winbind ähnlicher ist."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:169
+msgid ""
+"When this option is configured, domains will be allocated starting with "
+"slice zero and increasing monatomically with each additional domain."
+msgstr ""
+"Wenn diese Option konfiguriert wurde, werden Domains beginnend bei Slice "
+"null reserviert und gleichmäßig mit jeder zusätzlichen Domain vergrößert."
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:174
+msgid ""
+"NOTE: This algorithm is non-deterministic (it depends on the order that "
+"users and groups are requested). If this mode is required for compatibility "
+"with machines running winbind, it is recommended to also use the "
+"<quote>ldap_idmap_default_domain_sid</quote> option to guarantee that at "
+"least one domain is consistently allocated to slice zero."
+msgstr ""
+"HINWEIS: Der Algorithmus ist nicht deterministisch (er hängt von der "
+"Reihenfolge ab, in der Benutzer und Gruppen abgefragt werden). Falls dieser "
+"Modus aus Kompatibilitätsgründen mit Maschinen, die Winbind ausführen, "
+"erforderlich ist, wird empfohlen, auch die Option "
+"»ldap_idmap_default_domain_sid« zu verwenden. Dies soll sicherstellen, dass "
+"mindestens eine Domain beständig für den Slice null reserviert ist."
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help.xml:3
+msgid "<option>-?</option>,<option>--help</option>"
+msgstr "<option>-?</option>,<option>--help</option>"
+
+#. type: Content of: <varlistentry><listitem><para>
+#: include/param_help.xml:7 include/param_help_py.xml:7
+msgid "Display help message and exit."
+msgstr "zeigt den Hilfetext und beendet sich."
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help_py.xml:3
+msgid "<option>-h</option>,<option>--help</option>"
+msgstr "<option>-h</option>,<option>--help</option>"
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:3
+msgid ""
+"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
+"default value as well as the lowest allowed value, 0xFFF0 is the most "
+"verbose mode. This setting overrides the settings from config file."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:8
+msgid "Currently supported debug levels:"
+msgstr "derzeit unterstützte Debug-Stufen:"
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:11
+#, fuzzy
+#| msgid ""
+#| "<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: Fatal failures. "
+#| "Anything that would prevent SSSD from starting up or causes it to cease "
+#| "running."
+msgid ""
+"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
+"SSSD from starting up or causes it to cease running."
+msgstr ""
+"<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: Schwerwiegende Fehler. "
+"Alles was SSSD am Start hindern oder es beenden könnte."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:15
+#, fuzzy
+#| msgid ""
+#| "<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: Critical failures. "
+#| "An error that doesn't kill the SSSD, but one that indicates that at least "
+#| "one major feature is not going to work properly."
+msgid ""
+"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
+"the SSSD, but one that indicates that at least one major feature is not "
+"going to work properly."
+msgstr ""
+"<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: Kritische Fehler. Dies "
+"sind Fehler, die SSSD nicht gewaltsam beenden, aber mindestens eine "
+"Hauptfunktion nicht sauber arbeitet."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:20
+#, fuzzy
+#| msgid ""
+#| "<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: Serious failures. An "
+#| "error announcing that a particular request or operation has failed."
+msgid ""
+"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
+"particular request or operation has failed."
+msgstr ""
+"<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: Ernsthafte Fehler. Dies "
+"sind Fehler, bei denen eine bestimmte Anfrage oder Operation fehlgeschlagen "
+"ist."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:24
+#, fuzzy
+#| msgid ""
+#| "<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: Minor failures. "
+#| "These are the errors that would percolate down to cause the operation "
+#| "failure of 2."
+msgid ""
+"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
+"percolate down to cause the operation failure of 2."
+msgstr ""
+"<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: Kleinere Fehler. Dies "
+"sind Fehler, die von geringerer Bedeutung als die fehlgeschlagenen "
+"Operationen in der Stufe 2 sind."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid ""
+#| "<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: Configuration "
+#| "settings."
+msgid "<emphasis>0x0100</emphasis>: Configuration settings."
+msgstr ""
+"<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: "
+"Konfigurationseinstellungen."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: Function data."
+msgid "<emphasis>0x0200</emphasis>: Function data."
+msgstr "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: Funktionsdaten."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid ""
+#| "<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: Trace messages for "
+#| "operation functions."
+msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
+msgstr ""
+"<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: Meldungen aus der "
+"Verfolgung von Operationsfunktionen."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid ""
+#| "<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: Trace messages for "
+#| "internal control functions."
+msgid ""
+"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
+msgstr ""
+"<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: Meldungen aus der "
+"Verfolgung interner Kontrollfunktionen."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:40
+#, fuzzy
+#| msgid ""
+#| "<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: Contents of function-"
+#| "internal variables that may be interesting."
+msgid ""
+"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
+"may be interesting."
+msgstr ""
+"<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: Inhalte "
+"funktionsinterner Variablen, die von Interesse sein könnten."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid ""
+#| "<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: Extremely low-level "
+#| "tracing information."
+msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
+msgstr ""
+"<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: Verfolgungsmeldungen "
+"extrem niederster Ebene."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:46
+#, fuzzy
+#| msgid ""
+#| "To log required bitmask debug levels, simply add their numbers together "
+#| "as shown in following examples:"
+msgid ""
+"To log required debug levels, simply add their numbers together as shown in "
+"following examples:"
+msgstr ""
+"Um die Debug-Stufen nach Bitmaske zu protokollieren, fügen Sie deren Nummern "
+"hinzu, wie in den folgenden Beispielen gezeigt:"
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:49
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
+"serious failures and function data use 0x0270."
+msgstr ""
+"<emphasis>Beispiel</emphasis>: Um fatale, kritische, schwerwiegende Fehler "
+"und Funktionsdaten zu protokollieren, benutzen Sie 0x0270."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:53
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
+"function data, trace messages for internal control functions use 0x1310."
+msgstr ""
+"<emphasis>Beispiel</emphasis>: Um fatale Fehler, "
+"Konfigurationseinstellungen, Funktionsdaten und Verfolgungsnachrichten für "
+"interne Steuerfunktionen zu protokollieren, benutzen Sie 0x1310."
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:57
+#, fuzzy
+#| msgid ""
+#| "<emphasis>Note</emphasis>: The bitmask format of debug levels was "
+#| "introduced in 1.7.0."
+msgid ""
+"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
+"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
+msgstr ""
+"<emphasis>Hinweis</emphasis>: Das Bitmasken-Format der Debug-Level wurde in "
+"1.7.0 eingeführt."
+
+#. type: Content of: outside any tag (error?)
+#: include/experimental.xml:1
+msgid ""
+"<emphasis> This is an experimental feature, please use http://fedorahosted."
+"org/sssd to report any issues. </emphasis>"
+msgstr ""
+"<emphasis> Dies ist eine experimentelle Funktionalität. Fehler können Sie "
+"auf http://fedorahosted.org/sssd melden.</emphasis>"
+
+#. type: Content of: <refsect1><title>
+#: include/local.xml:2
+msgid "THE LOCAL DOMAIN"
+msgstr "DIE LOKALE DOMAIN"
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:4
+msgid ""
+"In order to function correctly, a domain with <quote>id_provider=local</"
+"quote> must be created and the SSSD must be running."
+msgstr ""
+"Für korrektes Funktionieren muss eine Domain mit »id_provider=local« "
+"erstellt sein und SSSD muss laufen."
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:9
+msgid ""
+"The administrator might want to use the SSSD local users instead of "
+"traditional UNIX users in cases where the group nesting (see <citerefentry> "
+"<refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</manvolnum> </"
+"citerefentry>) is needed. The local users are also useful for testing and "
+"development of the SSSD without having to deploy a full remote server. The "
+"<command>sss_user*</command> and <command>sss_group*</command> tools use a "
+"local LDB storage to store users and groups."
+msgstr ""
+"Möglicherweise möchte der Administrator in Fällen, in denen "
+"Gruppenverschachtelung (siehe <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>) benötigt wird, "
+"lokale Benutzer anstelle traditioneller UNIX-Benutzer verwenden. Die lokalen "
+"Benutzer sind auch für das Testen und Entwickeln von SSSD nützlich, ohne "
+"dass ein vollständiger ferner Server bereitgestellt werden muss. Die "
+"<command>sss_user*</command>- und <command>sss_group*</command>-Werkzeuge "
+"benutzen einen lokalen LDB-Speicher, um Benutzer und Gruppen abzulegen."
+
+#. type: Content of: <refsect1><title>
+#: include/seealso.xml:2
+msgid "SEE ALSO"
+msgstr "SIEHE AUCH"
+
+#. type: Content of: <refsect1><para>
+#: include/seealso.xml:4
+#, fuzzy
+#| msgid ""
+#| "<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</"
+#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
+#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
+#| "citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
+#| "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+#| "citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
+#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
+#| "manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> "
+#| "<citerefentry> <refentrytitle>sss_ssh_authorizedkeys</refentrytitle> "
+#| "<manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+#| "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+#| "manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+#| "<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
+#| "manvolnum> </citerefentry>, </phrase> <citerefentry> "
+#| "<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
+#| "citerefentry>."
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
+"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_ssh_knowhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
+msgstr ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
+"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+"<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:3
+#: include/ldap_search_bases_experimental.xml:3
+msgid ""
+"An optional base DN, search scope and LDAP filter to restrict LDAP searches "
+"for this attribute type."
+msgstr ""
+"ein optionaler Basis-DN, Gültigkeitsbereich für die Suche und LDAP-Filter, "
+"um die LDAP-Suchen für diesen Attributtyp einzuschränken."
+
+#. type: Content of: <listitem><para><programlisting>
+#: include/ldap_search_bases.xml:9
+#: include/ldap_search_bases_experimental.xml:9
+#, no-wrap
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
+msgstr "search_base[?Gültigkeitsbereich?[Filter][?Suchbasis?Gültigkeitsbereich?[Filter]]*]\n"
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:7
+#: include/ldap_search_bases_experimental.xml:7
+msgid "syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr "Syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:13
+#: include/ldap_search_bases_experimental.xml:13
+#, fuzzy
+#| msgid ""
+#| "The filter must be a valid LDAP search filter as specified by http://www."
+#| "ietf.org/rfc/rfc2254.txt"
+msgid ""
+"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
+"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
+"rfc2254.txt"
+msgstr ""
+"Der Filter muss ein gültiger LDAP-Suchfilter, wie durch http://www.ietf.org/"
+"rfc/rfc2254.txt spezifiziert, sein."
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:19
+#: include/ldap_search_bases_experimental.xml:19
+msgid ""
+"For examples of this syntax, please refer to the <quote>ldap_search_base</"
+"quote> examples section."
+msgstr ""
+"Beispiele für diese Syntax finden Sie im Beispielabschnitt von "
+"»ldap_search_base«."
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:27
+#: include/ldap_search_bases_experimental.xml:27
+msgid ""
+"Please note that specifying scope or filter is not supported for searches "
+"against an Active Directory Server that might yield a large number of "
+"results and trigger the Range Retrieval extension in the response."
+msgstr ""
+"Bitte beachten Sie, dass die Angabe von Gültigkeitsbereich oder Filter nicht "
+"beim Suchen auf einem Active-Directory-Server unterstützt wird, der "
+"möglicherweise eine große Anzahl an Ergebnissen zurückliefern und in der "
+"Antwort die Erweiterung »Range Retrieval« auslösen könnte."
+
+#. type: Content of: <para>
+#: include/autofs_restart.xml:2
+msgid ""
+"Please note that the automounter only reads the master map on startup, so if "
+"any autofs-related changes are made to the sssd.conf, you typically also "
+"need to restart the automounter daemon after restarting the SSSD."
+msgstr ""
+"Bitte beachten Sie, dass der Automounter beim Start nur die Master-Abbildung "
+"liest. Daher müssen Sie normalerweise, falls irgendwelche zu Autofs "
+"gehörigen Änderungen in der »sssd.conf« vorgenommen wurden, den Automounter-"
+"Daemon nach dem SSSD-Neustart ebenfalls neu starten."
+
+#~ msgid "GENERAL OPTIONS"
+#~ msgstr "ALLGEMEINE OPTIONEN"
+
+#~ msgid ""
+#~ "Following options are usable in more than one configuration sections."
+#~ msgstr ""
+#~ "Die folgenden Optionen sind in mehreren Konfigurationsabschnitten "
+#~ "verfügbar."
+
+#~ msgid "Options usable in all sections"
+#~ msgstr "In allen Abschnitten verfügbare Optionen"
+
+#~ msgid "Options usable in SERVICE and DOMAIN sections"
+#~ msgstr "In den Abschnitten SERVICE und DOMAIN verwendbare Optionen"
+
+#~ msgid "%1$s"
+#~ msgstr "%1$s"
+
+#~ msgid "user name"
+#~ msgstr "Benutzername"
+
+#~ msgid "%2$s"
+#~ msgstr "%2$s"
+
+#~ msgid "domain name as specified in the SSSD config file."
+#~ msgstr ""
+#~ "Domain-Name, wie er durch die SSSD-Konfigurationsdatei angegeben wird"
+
+#~ msgid "%3$s"
+#~ msgstr "%3$s"
+
+#~ msgid ""
+#~ "domain flat name. Mostly usable for Active Directory domains, both "
+#~ "directly configured or discovered via IPA trusts."
+#~ msgstr ""
+#~ "flacher Name der Domain; meist für Active-Directory-Domains nützlich, "
+#~ "sowohl direkt konfiguriert als auch über IPA-Trust"
+
+#~ msgid ""
+#~ "The following expansions are supported: <placeholder type=\"variablelist"
+#~ "\" id=\"0\"/>"
+#~ msgstr ""
+#~ "Die folgenden Erweiterungen werden unterstützt: <placeholder type="
+#~ "\"variablelist\" id=\"0\"/>"
+
+#~ msgid "offline_timeout (integer)"
+#~ msgstr "offline_timeout (Ganzzahl)"
+
+#~ msgid ""
+#~ "If SSSD is in offline mode, and last attempt to go online was less than "
+#~ "number of seconds specified in this option ago, new requests for data "
+#~ "will not result in attempt to go online."
+#~ msgstr ""
+#~ "Falls sich SSSD im Offline-Modus befindet und der letzte Versuch, online "
+#~ "zu gehen, lag mehr als die Anzahl der in dieser Option angegebenen "
+#~ "Sekunden zurück, werden neue Datenanfragen nicht zu erneuten Versuchen, "
+#~ "online zu gehen."
+
+#~ msgid ""
+#~ "The default shell to use if the provider does not return one during "
+#~ "lookup. This option can be specified globally in the [nss] section or per-"
+#~ "domain."
+#~ msgstr ""
+#~ "Die zu verwendende Vorgabeshell, falls der Anbieter während des "
+#~ "Suchvorgangs nichts zurückgibt. Diese Option kann entweder im Abschnitt "
+#~ "[nss] oder für jede Domain gesetzt werden."
+
+#~ msgid ""
+#~ "These options can be used to configure the sudo service. The detailed "
+#~ "instructions for configuration of <citerefentry> <refentrytitle>sudo</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to work with "
+#~ "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> are in the manual page <citerefentry> "
+#~ "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry>."
+#~ msgstr ""
+#~ "Diese Optionen können zur Konfiguration des Sudo-Dienstes verwendet "
+#~ "werden. Detaillierte Informationen zur Konfiguration von <citerefentry> "
+#~ "<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </"
+#~ "citerefentry> zur Verwendung mit <citerefentry> <refentrytitle>sssd</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> finden Sie in der "
+#~ "Handbuchseite zu <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid "subdomain_enumerate (string)"
+#~ msgstr "subdomain_enumerate (Zeichenkette)"
+
+#~ msgid "all"
+#~ msgstr "all"
+
+#~ msgid "All discovered trusted domains will be enumerated"
+#~ msgstr "Alle entdeckten vertrauenswürdigen Domains werden aufgezählt."
+
+#~ msgid "none"
+#~ msgstr "none"
+
+#~ msgid "No discovered trusted domains will be enumerated"
+#~ msgstr "Keine der entdeckten vertrauenswürdigen Domains wird aufgezählt."
+
+#~ msgid ""
+#~ "Whether any of autodetected trusted domains should be enumerated. The "
+#~ "supported values are: <placeholder type=\"variablelist\" id=\"0\"/> "
+#~ "Optionally, a list of one or more domain names can enable enumeration "
+#~ "just for these trusted domains."
+#~ msgstr ""
+#~ "Legt fest, ob eventuell automatisch erkannte vertrauenswürdige Domains "
+#~ "aufgezählt werden sollen. Folgende Werte werden unterstützt: <placeholder "
+#~ "type=\"variablelist\" id=\"0\"/> Optional wird eine Liste aus einer oder "
+#~ "mehreren Domain-Namen die Aufzählung für genau diese vertrauenswürdigen "
+#~ "Domains aktivieren."
+
+#~ msgid ""
+#~ "The cache expiration timestamps are stored as attributes of individual "
+#~ "objects in the cache. Therefore, changing the cache timeout only has "
+#~ "effect for newly added or expired entries. You should run the "
+#~ "<citerefentry> <refentrytitle>sss_cache</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> tool in order to force refresh of entries that "
+#~ "have already been cached."
+#~ msgstr ""
+#~ "Die Ablaufzeitstempel werden als Attribute individueller Objekte im "
+#~ "Zwischenspeicher gespeichert. Daher zeigt die Änderung der Ablaufzeiten "
+#~ "im Zwischenspeicher nur Wirkung bei neu hinzugefügten oder abgelaufenen "
+#~ "Einträgen. Sie sollten <citerefentry> <refentrytitle>sss_cache</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> ausführen, um die "
+#~ "Aktualisierung von Einträgen zu erzwingen, die bereits "
+#~ "zwischengespeichert wurden."
+
+#~ msgid ""
+#~ "Specifies how many seconds SSSD has to wait before triggering a "
+#~ "background refresh task which will refresh all expired or nearly expired "
+#~ "records."
+#~ msgstr ""
+#~ "Legt die Anzahl der Sekunden fest, die SSSD warten soll, bevor eine neuer "
+#~ "Prozess der Aktualisierung im Hintergrund ausgelöst wird, bei dem alle "
+#~ "abgelaufenen oder beinahe abgelaufenen Daten aktualisiert werden."
+
+#~ msgid "Currently only refreshing expired netgroups is supported."
+#~ msgstr ""
+#~ "Derzeit wird lediglich die Aktualisierung abgelaufener Netzgruppen "
+#~ "unterstützt."
+
+#~ msgid ""
+#~ "NOTE: This option has no effect on netgroup lookups due to their tendency "
+#~ "to include nested netgroups without qualified names. For netgroups, all "
+#~ "domains will be searched when an unqualified name is requested."
+#~ msgstr ""
+#~ "ACHTUNG: Diese Option ist bei Netzgruppen-Suchanfragen wirkungslos, da "
+#~ "diese dazu tendieren, verschachtelte Netzgruppen ohne voll qualifizierte "
+#~ "Namen einzubeziehen. Bei Netzgruppen werden alle Domains durchsucht, wenn "
+#~ "ein nicht voll qualifizierter Name angefragt wird."
+
+#~ msgid ""
+#~ "<quote>ipa</quote> the same as <quote>ldap</quote> but with IPA default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ipa</quote> ist gleichbedeutend mit <quote>ldap</quote>, aber mit "
+#~ "den Vorgabeeinstellungen für IPA."
+
+#~ msgid ""
+#~ "<quote>ad</quote> the same as <quote>ldap</quote> but with AD default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ad</quote> ist gleichbedeutend mit <quote>ldap</quote>, aber mit "
+#~ "den Vorgabeeinstellungen für AD."
+
+#~ msgid ""
+#~ "The detailed instructions for configuration of sudo_provider are in the "
+#~ "manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>. There are many configuration "
+#~ "options that can be used to adjust the behavior. Please refer to "
+#~ "\"ldap_sudo_*\" in <citerefentry> <refentrytitle>sssd-ldap</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+#~ msgstr ""
+#~ "Detaillierte Informationen zur Konfiguration von sudo_provider finden Sie "
+#~ "in der Handbuchseite zu <citerefentry> <refentrytitle>sssd-sudo</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>. Es gibt "
+#~ "zahlreiche verwendbare Konfigurationsoptionen, mit denen das Verhalten "
+#~ "angepasst werden kann. Siehe »ldap_sudo_*« in <citerefentry> "
+#~ "<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry>."
+
+#~ msgid ""
+#~ "Regular expression for this domain that describes how to parse the string "
+#~ "containing user name and domain into these components. The \"domain\" "
+#~ "can match either the SSSD configuration domain name, or, in the case of "
+#~ "IPA trust subdomains and Active Directory domains, the flat (NetBIOS) "
+#~ "name of the domain."
+#~ msgstr ""
+#~ "regulärer Ausdruck, der beschreibt, in welche Bestandteile die "
+#~ "Zeichenkette mit Benutzernamen und Domain bei der Auswertung zerlegt "
+#~ "werden soll. Die »Domain« kann entweder dem Domain-Namen der SSSD-"
+#~ "Konfiguration oder im Fall vertrauenswürdiger IPA-Subdomains und Active-"
+#~ "Directory-Domains dem flachen (NetBIOS-) Namen der Domain entsprechen."
+
+#~ msgid "%F"
+#~ msgstr "%F"
+
+#~ msgid "flat (NetBIOS) name of a subdomain."
+#~ msgstr "flacher (NetBIOS-) Name einer Subdomain"
+
+#~ msgid "realmd_tags (string)"
+#~ msgstr "realmd_tags (Zeichenkette)"
+
+#~ msgid ""
+#~ "Various tags stored by the realmd configuration service for this domain."
+#~ msgstr ""
+#~ "verschiedene vom Konfigurationsdienst »realmd« für diese Domain "
+#~ "gespeicherte Kennzeichnungen"
+
+#~ msgid "SSSD LDAP provider"
+#~ msgstr "SSSD LDAP-Anbieter"
+
+#~ msgid "ldap_user_extra_attrs (string)"
+#~ msgstr "ldap_user_extra_attrs (Zeichenkette)"
+
+#~ msgid ""
+#~ "Comma-separated list of LDAP attributes that SSSD would fetch along with "
+#~ "the usual set of user attributes."
+#~ msgstr ""
+#~ "Durch Kommata getrennte Liste der LDAP-Attribute, die SSSD zusammen mit "
+#~ "den üblichen Benutzerattributen holen soll."
+
+#~ msgid ""
+#~ "The list can either contain LDAP attribute names only, or colon-separated "
+#~ "tuples of SSSD cache attribute name and LDAP attribute name. In case only "
+#~ "LDAP attribute name is specified, the attribute is saved to the cache "
+#~ "verbatim. Using a custom SSSD attribute name might be required by "
+#~ "environments that configure several SSSD domains with different LDAP "
+#~ "schemas."
+#~ msgstr ""
+#~ "Die Liste kann entweder nur Namen von LDAP-Attributen enthalten, oder "
+#~ "durch Doppelpunkte getrennte Tupel aus Attributnamen des SSSD-"
+#~ "Zwischenspeichers und Namen von LDAP-Attributen. Wenn nur die Namen von "
+#~ "LDAP-Attributen angegeben werden, wird das Attribut unverändert im "
+#~ "Zwischenspeicher gespeichert. Die Verwendung eines benutzerdefinierten "
+#~ "SSSD-Attributnamens kann in Umgebungen notwendig sein, in denen mehrere "
+#~ "SSSD-Domains mit unterschiedlichen LDAP-Schemata eingerichtet sind."
+
+#~ msgid ""
+#~ "Please note that several attribute names are reserved by SSSD, notably "
+#~ "the <quote>name</quote> attribute. SSSD would report an error if any of "
+#~ "the reserved attribute names is used as an extra attribute name."
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass diverse Attributnamen durch SSSD reserviert "
+#~ "sind, beispielsweise das Attribut <quote>name</quote>. SSSD würde einen "
+#~ "Fehler melden, falls eines der reservierten Attribute als zusätzlicher "
+#~ "Attributname verwendet wird."
+
+#~ msgid "ldap_user_extra_attrs = telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>telephoneNumber</quote> to the cache."
+#~ msgstr ""
+#~ "Speichert das Attribut <quote>telephoneNumber</quote> von LDAP als "
+#~ "<quote>telephoneNumber</quote> im Zwischenspeicher."
+
+#~ msgid "ldap_user_extra_attrs = phone:telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = phone:telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>phone</quote> to the cache."
+#~ msgstr ""
+#~ "Speichert das Attribut <quote>telephoneNumber</quote> von LDAP als "
+#~ "<quote>phone</quote> im Zwischenspeicher."
+
+#~ msgid ""
+#~ "Please note that the ldap_access_order configuration option "
+#~ "<emphasis>must</emphasis> include <quote>authorized_service</quote> in "
+#~ "order for the ldap_user_authorized_service option to work."
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass die Konfigurationsoption »ldap_access_order« "
+#~ "»authorized_service« enthalten <emphasis>muss</emphasis>, damit die "
+#~ "Option »ldap_user_authorized_service« funktioniert."
+
+#~ msgid ""
+#~ "Please note that the ldap_access_order configuration option "
+#~ "<emphasis>must</emphasis> include <quote>host</quote> in order for the "
+#~ "ldap_user_authorized_host option to work."
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass die Konfigurationsoption »ldap_access_order« "
+#~ "»host« enthalten <emphasis>muss</emphasis>, damit die Option "
+#~ "»ldap_user_authorized_host« funktioniert."
+
+#~ msgid "ldap_group_type (integer)"
+#~ msgstr "ldap_group_type (Ganzzahl)"
+
+#~ msgid ""
+#~ "The LDAP attribute that contains an integer value indicating the type of "
+#~ "the group and maybe other flags."
+#~ msgstr ""
+#~ "Das LDAP-Attribut, das einen Ganzzahlwert enthält, der den Gruppentyp und "
+#~ "eventuell weitere Flags enthält."
+
+#~ msgid ""
+#~ "This attribute is currently only used by the AD provider to determine if "
+#~ "a group is a domain local groups and has to be filtered out for trusted "
+#~ "domains."
+#~ msgstr ""
+#~ "Dieses Attribut wird derzeit nur vom AD-Anbieter verwendet, um zu "
+#~ "ermitteln, ob eine Gruppe eine lokale Domain-Gruppe ist und aus den "
+#~ "vertrauenswürdigen Domains herausgefiltert werden sollte."
+
+#~ msgid "Default: groupType in the AD provider, othewise not set"
+#~ msgstr ""
+#~ "Voreinstellung: groupType im AD-Anbieter, anderenfalls nicht gesetzt"
+
+#~ msgid ""
+#~ "Note: This option specifies the guaranteed level of nested groups to be "
+#~ "processed for any lookup. However, nested groups beyond this limit "
+#~ "<emphasis>may be</emphasis> returned if previous lookups already resolved "
+#~ "the deeper nesting levels. Also, subsequent lookups for other groups may "
+#~ "enlarge the result set for original lookup if re-queried."
+#~ msgstr ""
+#~ "Hinweis: Diese Option gibt die garantierte Tiefe verschachtelter Gruppen "
+#~ "an, die bei Suchvorgängen verarbeitet werden soll. Dennoch "
+#~ "<emphasis>können</emphasis> auch tiefer verschachtelte Gruppen einbezogen "
+#~ "werden, falls bei früheren Suchvorgängen die tieferen Ebenen bereits "
+#~ "einmal berücksichtigt wurden. Außerdem können folgende Suchvorgänge für "
+#~ "andere Gruppen die Ergebnisse des ursprünglichen Suchvorgangs vergrößern, "
+#~ "wenn die Suche erneut erfolgt."
+
+#~ msgid ""
+#~ "If ldap_group_nesting_level is set to 0 then no nested groups are "
+#~ "processed at all. However, when connected to Active-Directory Server 2008 "
+#~ "and later it is furthermore required to disable usage of Token-Groups by "
+#~ "setting ldap_use_tokengroups to false."
+#~ msgstr ""
+#~ "Falls ldap_group_nesting_level auf 0 gesetzt ist, werden überhaupt keine "
+#~ "verschachtelten Gruppen verarbeitet. Es ist außerdem notwendig, für den "
+#~ "Active Directory Server 2008 und neuere Versionen die Verwendung von "
+#~ "Token-Gruppen zu deaktivieren, indem der boolesche Wert von "
+#~ "ldap_use_tokengroups auf »falsch« gesetzt wird."
+
+#~ msgid "ldap_use_tokengroups"
+#~ msgstr "ldap_use_tokengroups"
+
+#~ msgid ""
+#~ "This options enables or disables use of Token-Groups attribute when "
+#~ "performing initgroup for users from Active Directory Server 2008 and "
+#~ "later."
+#~ msgstr ""
+#~ "Diese Optionen aktivieren oder deaktivieren die Verwendung des Token-"
+#~ "Gruppen-Attributs, wenn »initgroup« für Benutzers des Active Directory "
+#~ "Servers 2008 und neuere Versionen ausgeführt wird."
+
+#~ msgid "ldap_min_id, ldap_max_id (interger)"
+#~ msgstr "ldap_min_id, ldap_max_id (Ganzzahl)"
+
+#~ msgid ""
+#~ "In contrast to the SID based ID mapping which is used if ldap_id_mapping "
+#~ "is set to true the allowed ID range for ldap_user_uid_number and "
+#~ "ldap_group_gid_number is unbound. In a setup with sub/trusted-domains "
+#~ "this might lead to ID collisions. To avoid collisions ldap_min_id and "
+#~ "ldap_max_id can be set to restrict the allowed range for the IDs which "
+#~ "are read directly from the server. Sub-domains can then pick other ranges "
+#~ "to map IDs."
+#~ msgstr ""
+#~ "Im Gegensatz zum SID-basierten ID-Abbilden, das benutzt wird, falls "
+#~ "»ldap_id_mapping« auf »true« gesetzt ist, ist der erlaubte ID-Bereich für "
+#~ "»ldap_user_uid_number« und »ldap_group_gid_number« offen. In einer "
+#~ "Konfiguration mit Unter-Domains und vertrauenswürdigen Domains könnte "
+#~ "dies zu ID-Kollisionen führen. Um Kollisionen zu vermeiden, können "
+#~ "»ldap_min_id« und »ldap_max_id« zum Begrenzen des erlaubten Bereichs für "
+#~ "direkt vom Server gelesene IDs verwendet werden. Unter-Domains können "
+#~ "dann andere Bereiche zur Abbildung von IDs wählen."
+
+#~ msgid "Default: not set (both options are set to 0)"
+#~ msgstr "Voreinstellung: nicht gesetzt (beide Optionen sind auf 0 gesetzt)"
+
+#~ msgid "krb5_use_kdcinfo (boolean)"
+#~ msgstr "krb5_use_kdcinfo (Boolesch)"
+
+#~ msgid ""
+#~ "Specifies if the SSSD should instruct the Kerberos libraries what realm "
+#~ "and which KDCs to use. This option is on by default, if you disable it, "
+#~ "you need to configure the Kerberos library using the <citerefentry> "
+#~ "<refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry> configuration file."
+#~ msgstr ""
+#~ "gibt an, ob SSSD die Kerberos-Bibliotheken anweisen soll, welcher Realm "
+#~ "und welche Schlüsselverwaltungszentralen (KDCs) benutzt werden sollen. "
+#~ "Diese Option ist standardmäßig eingeschaltet. Falls Sie sie ausschalten, "
+#~ "müssen Sie die Kerberos-Bibliothek mittels der Konfigurationsdatei "
+#~ "<citerefentry><refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry> einrichten."
+
+#~ msgid ""
+#~ "See the <citerefentry> <refentrytitle>sssd_krb5_locator_plugin</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> manual page for "
+#~ "more information on the locator plugin."
+#~ msgstr ""
+#~ "Weitere Informationen über die Locator-Erweiterung finden Sie auf der "
+#~ "Handbuchseite <citerefentry> <refentrytitle>sssd_krb5_locator_plugin</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry>."
+
+#~ msgid ""
+#~ "<emphasis>Note</emphasis>: if a password policy is configured on server "
+#~ "side, it always takes precedence over policy set with this option."
+#~ msgstr ""
+#~ "<emphasis>Hinweis</emphasis>: Falls serverseitig eine Passwortregel "
+#~ "konfiguriert ist, hat diese stets Vorrang vor der mit dieser Option "
+#~ "festgelegten Regel."
+
+#~ msgid ""
+#~ "Please note that the ldap_access_order configuration option "
+#~ "<emphasis>must</emphasis> include <quote>expire</quote> in order for the "
+#~ "ldap_account_expire_policy option to work."
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass die Konfigurationsoption »ldap_access_order« "
+#~ "»expire« enthalten <emphasis>muss</emphasis>, damit die Option "
+#~ "»ldap_account_expire_policy« funktioniert."
+
+#~ msgid ""
+#~ "The detailed instructions for configuration of sudo_provider are in the "
+#~ "manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>."
+#~ msgstr ""
+#~ "Detaillierte Anweisungen zur Konfiguration von sudo_provider finden Sie "
+#~ "in der Handbuchseite zu <citerefentry> <refentrytitle>sssd-sudo</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid "ldap_autofs_map_master_name (string)"
+#~ msgstr "ldap_autofs_map_master_name (Zeichenkette)"
+
+#~ msgid "The name of the automount master map in LDAP."
+#~ msgstr "Der Name der Automount-Master-Abbildung in LDAP."
+
+#~ msgid "Default: auto.master"
+#~ msgstr "Voreinstellung: auto.master"
+
+#~ msgid "<option>ignore_unknown_user</option>"
+#~ msgstr "<option>ignore_unknown_user</option>"
+
+#~ msgid ""
+#~ "If this option is specified and the user does not exist, the PAM module "
+#~ "will return PAM_IGNORE. This causes the PAM framework to ignore this "
+#~ "module."
+#~ msgstr ""
+#~ "Falls diese Option angegeben ist, aber der Benutzer nicht existiert, gibt "
+#~ "das PAM-Modul den Wert PAM_IGNORE zurück. Dies hat zur Folge, dass das "
+#~ "PAM-Framework dieses Modul ignoriert."
+
+#~ msgid "<option>ignore_authinfo_unavail</option>"
+#~ msgstr "<option>ignore_authinfo_unavail</option>"
+
+#~ msgid ""
+#~ "Specifies that the PAM module should return PAM_IGNORE if it cannot "
+#~ "contact the SSSD daemon. This causes the PAM framework to ignore this "
+#~ "module."
+#~ msgstr ""
+#~ "Gibt an, dass das PAM-Modul PAM_IGNORE zurückgeben soll, falls der SSSD-"
+#~ "Daemon nicht kontaktiert werden kann. Dies hat zur Folge, dass das PAM-"
+#~ "Framework dieses Modul ignoriert."
+
+#~ msgid "Kerberos locator plugin"
+#~ msgstr "Kerberos Locator-Plugin"
+
+#~ msgid ""
+#~ "The complete group membership hierarchy is resolved before the access "
+#~ "check, thus even nested groups can be included in the access lists. "
+#~ "Please be aware that the <quote>ldap_group_nesting_level</quote> option "
+#~ "may impact the results and should be set to a sufficient value. "
+#~ "(<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
+#~ "manvolnum> </citerefentry>) option."
+#~ msgstr ""
+#~ "Die vollständige Hierarchie der Gruppenmitgliedschaft wird aufgelöst, "
+#~ "bevor die Zugriffsprüfung ausgeführt wird. Daher können selbst "
+#~ "verschachtelte Gruppen Teil der Zugriffslisten werden. Bitte beachten "
+#~ "Sie, dass die Option <quote>ldap_group_nesting_level</quote> die "
+#~ "Ergebnisse beeinflussen kann und daher auf einen ausreichenden Wert "
+#~ "gesetzt werden sollte. Siehe (<citerefentry> <refentrytitle>sssd-ldap</"
+#~ "refentrytitle><manvolnum>5</manvolnum> </citerefentry>)."
+
+#~ msgid "SSSD IPA provider"
+#~ msgstr "SSSD IPA-Anbieter"
+
+#~ msgid ""
+#~ "Optional. This option tells SSSD to automatically update the DNS server "
+#~ "built into FreeIPA v2 with the IP address of this client. The update is "
+#~ "secured using GSS-TSIG. The IP address of the IPA LDAP connection is used "
+#~ "for the updates, if it is not otherwise specified by using the "
+#~ "<quote>dyndns_iface</quote> option."
+#~ msgstr ""
+#~ "optional. Diese Option teilt SSSD mit, dass es den in FreeIPA v2 "
+#~ "eingebauten DNS-Server mit der IP-Adresse dieses Clients aktualisieren "
+#~ "soll. Die Aktualisierung wird mittels GSS-TSIG abgesichert. Für die "
+#~ "Aktualisierungen wird die IP-Adresse der IPA-LDAP-Verbindung benutzt, "
+#~ "falls in der Option »dyndns_iface« keine andere angegeben wurde."
+
+#~ msgid ""
+#~ "NOTE: While it is still possible to use the old "
+#~ "<emphasis>ipa_dyndns_update</emphasis> option, users should migrate to "
+#~ "using <emphasis>dyndns_update</emphasis> in their config file."
+#~ msgstr ""
+#~ "HINWEIS: Obwohl es immer noch möglich ist, die alte Option "
+#~ "<emphasis>ipa_dyndns_update</emphasis> zu benutzen, sollten Anwender auf "
+#~ "die Verwendung von <emphasis>dyndns_update</emphasis> in ihrer "
+#~ "Konfigurationsdatei migrieren."
+
+#~ msgid "dyndns_ttl (integer)"
+#~ msgstr "dyndns_ttl (Ganzzahl)"
+
+#~ msgid ""
+#~ "The TTL to apply to the client DNS record when updating it. If "
+#~ "dyndns_update is false this has no effect. This will override the TTL "
+#~ "serverside if set by an administrator."
+#~ msgstr ""
+#~ "die TTL, die beim Aktualisieren auf den Client-DNS-Datensatz angewandt "
+#~ "wird. Falls »dyndns_update« »false« ist, hat dies keine Auswirkungen. "
+#~ "Diese wird die Server-seitige TTL außer Kraft setzen, falls diese durch "
+#~ "einen Administrator gesetzt wurde."
+
+#~ msgid ""
+#~ "NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_ttl</"
+#~ "emphasis> option, users should migrate to using <emphasis>dyndns_ttl</"
+#~ "emphasis> in their config file."
+#~ msgstr ""
+#~ "HINWEIS: Obwohl es immer noch möglich ist, die alte Option "
+#~ "<emphasis>ipa_dyndns_ttl</emphasis> zu benutzen, sollten Anwender auf die "
+#~ "Verwendung von <emphasis>dyndns_ttl</emphasis> in ihrer "
+#~ "Konfigurationsdatei migrieren."
+
+#~ msgid "Default: 1200 (seconds)"
+#~ msgstr "Voreinstellung: 1200 (Sekunden)"
+
+#~ msgid ""
+#~ "NOTE: While it is still possible to use the old "
+#~ "<emphasis>ipa_dyndns_iface</emphasis> option, users should migrate to "
+#~ "using <emphasis>dyndns_iface</emphasis> in their config file."
+#~ msgstr ""
+#~ "HINWEIS: Obwohl es immer noch möglich ist, die alte Option "
+#~ "<emphasis>ipa_dyndns_iface</emphasis> zu benutzen, sollten Anwender auf "
+#~ "die Verwendung von <emphasis>dyndns_iface</emphasis> in ihrer "
+#~ "Konfigurationsdatei migrieren."
+
+#~ msgid "Enables DNS sites - location based service discovery."
+#~ msgstr "aktiviert DNS-Sites – standortbasierte Dienstsuche"
+
+#~ msgid ""
+#~ "If true and service discovery (see Service Discovery paragraph at the "
+#~ "bottom of the man page) is enabled, then the SSSD will first attempt "
+#~ "location based discovery using a query that contains \"_location.hostname."
+#~ "example.com\" and then fall back to traditional SRV discovery. If the "
+#~ "location based discovery succeeds, the IPA servers located with the "
+#~ "location based discovery are treated as primary servers and the IPA "
+#~ "servers located using the traditional SRV discovery are used as back up "
+#~ "servers"
+#~ msgstr ""
+#~ "Ist dies »true« und die Dienstsuche aktiviert (siehe den Abschnitt "
+#~ "Dienstsuche am Ende der Handbuchseite), dann wird SSSD zuerst versuchen, "
+#~ "eine standortbasierte Suche mittels einer Abfrage, die »_location."
+#~ "hostname.example.com« enthält, durchzuführen und dann auf die "
+#~ "traditionelle SRV-Suche zurückgreifen. Falls die standortbasierte Suche "
+#~ "erfolgreich ist, werden die georteten IPA-Server, die mit der "
+#~ "standortbasierten Suche gefunden wurden, als primäre Server betrachtet "
+#~ "und die mit der traditionellen SRV-Suche gefundenen als Sicherungsserver."
+
+#~ msgid "dyndns_refresh_interval (integer)"
+#~ msgstr "dyndns_refresh_interval (Ganzzahl)"
+
+#~ msgid ""
+#~ "How often should the back end perform periodic DNS update in addition to "
+#~ "the automatic update performed when the back end goes online. This "
+#~ "option is optional and applicable only when dyndns_update is true."
+#~ msgstr ""
+#~ "wie oft das Backend periodische DNS-Aktualisierungen zusätzlich zur "
+#~ "automatisch beim Online-Gehen durchgeführten Aktualisierung vornehmen "
+#~ "soll. Diese Option ist optional und nur anwendbar, wenn »dyndns_update« "
+#~ "»true« ist."
+
+#~ msgid "dyndns_update_ptr (bool)"
+#~ msgstr "dyndns_update_ptr (Boolesch)"
+
+#~ msgid ""
+#~ "Whether the PTR record should also be explicitly updated when updating "
+#~ "the client's DNS records. Applicable only when dyndns_update is true."
+#~ msgstr ""
+#~ "ob der PTR-Datensatz ebenfalls explizit aktualisiert werden soll, wenn "
+#~ "die DNS-Datensätze des Clients aktualisiert werden; nur anwendbar, wenn "
+#~ "»dyndns_update« »true« ist"
+
+#~ msgid ""
+#~ "This option should be False in most IPA deployments as the IPA server "
+#~ "generates the PTR records automatically when forward records are changed."
+#~ msgstr ""
+#~ "Diese Option sollte in den meisten IPA-Bereitstellungen »False« sein, da "
+#~ "der IPA-Server die PTR-Datensätze automatisch erzeugt, wenn sich "
+#~ "Weiterleitungsdatensätze ändern."
+
+#~ msgid "Default: False (disabled)"
+#~ msgstr "Voreinstellung: False (deaktiviert)"
+
+#~ msgid "dyndns_force_tcp (bool)"
+#~ msgstr "dyndns_force_tcp (Boolesch)"
+
+#~ msgid ""
+#~ "Whether the nsupdate utility should default to using TCP for "
+#~ "communicating with the DNS server."
+#~ msgstr ""
+#~ "ob das Hilfswerkzeug Nsupdate standardmäßig TCP zur Kommunikation mit dem "
+#~ "DNS-Server verwenden soll"
+
+#~ msgid "Default: False (let nsupdate choose the protocol)"
+#~ msgstr "Voreinstellung: False (lässt Nsupdate das Protokoll auswählen)"
+
+#~ msgid "<emphasis>never</emphasis> use FAST."
+#~ msgstr "FAST wird <emphasis>nie</emphasis> verwendet."
+
+#~ msgid ""
+#~ "<emphasis>try</emphasis> to use FAST. If the server does not support "
+#~ "FAST, continue the authentication without it. This is equivalent to not "
+#~ "setting this option at all."
+#~ msgstr ""
+#~ "Es wird <emphasis>versucht</emphasis>, FAST zu verwenden. Sollte der "
+#~ "Server FAST nicht unterstützen, wird die Authentifizierung ohne FAST "
+#~ "fortgesetzt. Dies ist gleichbedeutend damit, dass diese Option überhaupt "
+#~ "nicht gesetzt wurde."
+
+#~ msgid "ipa_hbac_selinux (integer)"
+#~ msgstr "ipa_hbac_selinux (Ganzzahl)"
+
+#~ msgid ""
+#~ "The amount of time between lookups of the SELinux maps against the IPA "
+#~ "server. This will reduce the latency and load on the IPA server if there "
+#~ "are many user login requests made in a short period."
+#~ msgstr ""
+#~ "die Zeit zwischen den Abrufen der SELinux-Abbildungen beim IPA-Server. "
+#~ "Dies wird die Wartezeit und Belastung des IPA-Servers verringern, falls "
+#~ "dort viele Benutzeranmeldeanfragen in einer kurzen Zeitspanne ankommen."
+
+#~ msgid "ipa_server_mode (boolean)"
+#~ msgstr "ipa_server_mode (Boolesch)"
+
+#~ msgid "This option should only be set by the IPA installer."
+#~ msgstr "Diese Option sollte nur vom IPA-Installer gesetzt werden."
+
+#~ msgid ""
+#~ "The option denotes that the SSSD is running on IPA server and should "
+#~ "perform lookups of users and groups from trusted domains differently."
+#~ msgstr ""
+#~ "Die Option zeigt an, dass SSSD auf einem IPA-Server läuft und dass das "
+#~ "Nachschlagen von Benutzern und Gruppen von vertrauenswürdigen Domains "
+#~ "anders durchgeführt werden sollte."
+
+#~ msgid "SSSD Active Directory provider"
+#~ msgstr "SSSD Active-Directory-Anbieter"
+
+#~ msgid ""
+#~ "The AD provider is able to provide identity information and "
+#~ "authentication for entities from trusted domains as well. Currently only "
+#~ "trusted domains in the same forest are recognized."
+#~ msgstr ""
+#~ "Der AD-Anbieter stellt Identitätsinformationen bereit und ermöglicht die "
+#~ "Authentifizierung für Einträge in vertrauenswürdigen Domains. Derzeit "
+#~ "werden nur vertrauenswürdige Domains im gleichen Wald unterstützt."
+
+#~ msgid ""
+#~ "Users, groups and other entities served by SSSD are always treated as "
+#~ "case-insensitive in the AD provider for compatibility with Active "
+#~ "Directory's LDAP implementation."
+#~ msgstr ""
+#~ "Für Benutzer, Gruppen und weitere von SSSD bereitgestellt Einträge wird "
+#~ "die Groß- oder Kleinschreibung nicht beachtet, um die Kompatibilität zur "
+#~ "LDAP-Implementation in Active Directory zu gewährleisten."
+
+#~ msgid ""
+#~ "The short domain name (also known as the NetBIOS or the flat name) is "
+#~ "autodetected by the SSSD."
+#~ msgstr ""
+#~ "Der kurze Domain-Name (auch als NetBIOS- oder flacher Name bekannt) wird "
+#~ "von SSSD automatisch ermittelt."
+
+#~ msgid ""
+#~ "The comma-separated list of hostnames of the AD servers to which SSSD "
+#~ "should connect in order of preference. For more information on failover "
+#~ "and server redundancy, see the <quote>FAILOVER</quote> section. This is "
+#~ "optional if autodiscovery is enabled. For more information on service "
+#~ "discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+#~ msgstr ""
+#~ "Die durch Kommata getrennte Liste von Rechnernamen der AD-Server in der "
+#~ "Reihenfolge, in der sich SSSD mit ihnen verbinden soll. Weitere "
+#~ "Informationen über Ausfallsicherung und Redundanz finden Sie im Abschnitt "
+#~ "»AUSFALLSICHERUNG«. Falls automatisches Auffinden aktiviert ist, ist dies "
+#~ "optional. Weitere Informationen finden Sie im Abschnitt »DIENSTSUCHE«."
+
+#~ msgid "ad_enable_dns_sites (boolean)"
+#~ msgstr "ad_enable_dns_sites (Boolesch)"
+
+#~ msgid ""
+#~ "If true and service discovery (see Service Discovery paragraph at the "
+#~ "bottom of the man page) is enabled, the SSSD will first attempt to "
+#~ "discover the Active Directory server to connect to using the Active "
+#~ "Directory Site Discovery and fall back to the DNS SRV records if no AD "
+#~ "site is found. The DNS SRV configuration, including the discovery domain, "
+#~ "is used during site discovery as well."
+#~ msgstr ""
+#~ "Ist dies »true« und die Dienstsuche aktiviert (siehe den Abschnitt "
+#~ "Dienstsuche am Ende der Handbuchseite), dann wird SSSD zuerst versuchen, "
+#~ "sich mit dem Active-Directory-Server zu verbinden, um die Active "
+#~ "Directory Site Discovery zu benutzen und dann auf die DNS-SRV-Datensätze "
+#~ "zurückgreifen, falls keine AD-Site gefunden wurde. Die DNS-SRV-"
+#~ "Konfiguration wird ebenfalls einschließlich der Domain zur Aufdeckung bei "
+#~ "der Site-Aufdeckung verwendet."
+
+#~ msgid "ad_access_filter (string)"
+#~ msgstr "ad_access_filter (Zeichenkette)"
+
+#~ msgid ""
+#~ "This option specifies LDAP access control filter that the user must match "
+#~ "in order to be allowed access. Please note that the "
+#~ "<quote>access_provider</quote> option must be explicitly set to "
+#~ "<quote>ad</quote> in order for this option to have an effect."
+#~ msgstr ""
+#~ "Diese Option gibt Zugriffskontrollfilter für LDAP an, die auf den "
+#~ "Benutzer passen müssen, damit ihm Zugriff gewährt werden kann. Bitte "
+#~ "beachten Sie, dass die Option <quote>access_provider</quote> explizit auf "
+#~ "<quote>ad</quote> gesetzt werden muss, damit sie wirksam ist."
+
+#~ msgid ""
+#~ "The option also supports specifying different filters per domain or "
+#~ "forest. This extended filter would consist of: <quote>KEYWORD:NAME:"
+#~ "FILTER</quote>. The keyword can be either <quote>DOM</quote>, "
+#~ "<quote>FOREST</quote> or missing."
+#~ msgstr ""
+#~ "Diese Option unterstützt auch die Angabe verschiedener Filter pro Domain "
+#~ "oder Wald. Dieser erweiterte Filter würde bestehen aus: "
+#~ "<quote>SCHLÜSSELWORT:NAME:FILTER</quote>. Das Schlüsselwort kann entweder "
+#~ "<quote>DOM</quote> oder <quote>FOREST</quote> sein oder auch weggelassen "
+#~ "werden."
+
+#~ msgid ""
+#~ "If the keyword equals to <quote>DOM</quote> or is missing, then "
+#~ "<quote>NAME</quote> specifies the domain or subdomain the filter applies "
+#~ "to. If the keyword equals to <quote>FOREST</quote>, then the filter "
+#~ "equals to all domains from the forest specified by <quote>NAME</quote>."
+#~ msgstr ""
+#~ "Falls das Schlüsselwort <quote>DOM</quote> ist oder fehlt, dann gibt der "
+#~ "<quote>NAME</quote> die Domain oder Subdomain an, auf die der Filter "
+#~ "angewendet werden soll. Ist das Schlüsselwort <quote>FOREST</quote>, dann "
+#~ "gilt der Filter für alle angegebenen Domains aus dem Wald, der in "
+#~ "<quote>NAME</quote> angegeben ist."
+
+#~ msgid ""
+#~ "Multiple filters can be separated with the <quote>?</quote> character, "
+#~ "similarly to how search bases work."
+#~ msgstr ""
+#~ "Mehrere Filter können durch Fragezeichen <quote>?</quote> getrennt "
+#~ "werden, so wie es auch in Suchmaschinen üblich ist."
+
+#~ msgid ""
+#~ "The most specific match is always used. For example, if the option "
+#~ "specified filter for a domain the user is a member of and a global "
+#~ "filter, the per-domain filter would be applied. If there are more "
+#~ "matches with the same specification, the first one is used."
+#~ msgstr ""
+#~ "Es wird stets der spezifischste Treffer verwendet. Wenn zum Beispiel in "
+#~ "der den Filter angebenden Option der Benutzer ein Mitglied ist und es "
+#~ "sich um einen globalen Filter handelt, wird der pro-Domain-Filter "
+#~ "angewendet. Gibt es mehrere Treffer, die der angeforderten Spezifikation "
+#~ "entsprechen, wird der erste verwendet."
+
+#~ msgid ""
+#~ "# apply filter on domain called dom1 only:\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on domain called dom2 only:\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on forest called EXAMPLE.COM only:\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+#~ msgstr ""
+#~ "# apply filter on domain called dom1 only:\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on domain called dom2 only:\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on forest called EXAMPLE.COM only:\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+
+#~ msgid "Default: Not set"
+#~ msgstr "Voreinstellung: Nicht gesetzt"
+
+#~ msgid "ad_enable_gc (boolean)"
+#~ msgstr "ad_enable_gc (Boolesch)"
+
+#~ msgid ""
+#~ "By default, the SSSD connects to the Global Catalog first to retrieve "
+#~ "users from trusted domains and uses the LDAP port to retrieve group "
+#~ "memberships or as a fallback. Disabling this option makes the SSSD only "
+#~ "connect to the LDAP port of the current AD server."
+#~ msgstr ""
+#~ "Standardmäßig verbindet sich SSSD zuerst mit dem Globalen Katalog, um "
+#~ "Benutzer von vertrauenswürdigen Domains abfragen zu können. Der LDAP-Port "
+#~ "wird zum Ermitteln von Gruppenmitgliedschaften oder als "
+#~ "Ausweichmöglichkeit verwendet. Wenn Sie diese Option deaktivieren, "
+#~ "verbindet sich SSSD nur mit dem LDAP-Port des aktuellen Servers."
+
+#~ msgid ""
+#~ "Please note that disabling Global Catalog support does not disable "
+#~ "retrieving users from trusted domains. The SSSD would connect to the LDAP "
+#~ "port of trusted domains instead. However, Global Catalog must be used in "
+#~ "order to resolve cross-domain group memberships."
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass die Deaktivierung der Unterstützung für den "
+#~ "Globalen Katalog die Abfrage von Benutzern von vertrauenswürdigen Domains "
+#~ "nicht deaktiviert. SSSD würde sich stattdessen mit dem LDAP-Port der "
+#~ "vertrauenswürdigen Domains verbinden. Jedoch muss der Globale Katalog "
+#~ "verwendet werden, um domainübergreifende Gruppenmitgliedschaften auflösen "
+#~ "zu können."
+
+#~ msgid "ad_gpo_access_control (string)"
+#~ msgstr "ad_gpo_access_control (Zeichenkette)"
+
+#~ msgid ""
+#~ "This option specifies the operation mode for GPO-based access control "
+#~ "functionality: whether it operates in disabled mode, enforcing mode, or "
+#~ "permissive mode. Please note that the <quote>access_provider</quote> "
+#~ "option must be explicitly set to <quote>ad</quote> in order for this "
+#~ "option to have an effect."
+#~ msgstr ""
+#~ "Diese Option legt den Operationsmodus für GPO-basierte Zugriffskontrolle "
+#~ "fest. Verfügbar sind die Modi »disabled«, »enforcing« und »permissive«. "
+#~ "Bitte beachten Sie, dass die Option <quote>access_provider</quote> "
+#~ "explizit auf <quote>ad</quote> gesetzt werden muss, damit sie wirksam ist."
+
+#~ msgid ""
+#~ "GPO-based access control functionality uses GPO policy settings to "
+#~ "determine whether or not a particular user is allowed to logon to a "
+#~ "particular host."
+#~ msgstr ""
+#~ "Die GPO-basierte Zugriffskontrolle verwendet gesetzte GPO-Regeln, um zu "
+#~ "ermitteln, ob sich ein bestimmter Benutzer an einem bestimmten Rechner "
+#~ "anmelden darf."
+
+#~ msgid ""
+#~ "NOTE: If the operation mode is set to enforcing, it is possible that "
+#~ "users that were previously allowed logon access will now be denied logon "
+#~ "access (as dictated by the GPO policy settings). In order to facilitate a "
+#~ "smooth transition for administrators, a permissive mode is available that "
+#~ "will not enforce the access control rules, but will evaluate them and "
+#~ "will output a syslog message if access would have been denied. By "
+#~ "examining the logs, administrators can then make the necessary changes "
+#~ "before setting the mode to enforcing."
+#~ msgstr ""
+#~ "ACHTUNG: Wird der Operationsmodus auf »enforcing« gesetzt, dann ist es "
+#~ "möglich, dass Benutzern, denen früher bereits einmal Zugriff gewährt "
+#~ "wurde, ihnen dieser nun verweigert wird (sofern dies von den GPO-Regeln "
+#~ "vorgeschrieben wird). Um Administratoren einen weichen Übergang zu "
+#~ "ermöglichen, ist der Modus »permissive« verfügbar, der die Umsetzung der "
+#~ "Zugriffskontrollregeln nicht erzwingt. Diese werden lediglich ausgewertet "
+#~ "und eine Meldung geht an das Systemprotokoll, falls tatsächlich der "
+#~ "Zugriff verweigert werden würde. Nach dem Untersuchen der Protokolle "
+#~ "können Administratoren nun die nötigen Änderungen vornehmen, bevor der "
+#~ "Modus auf »enforcing« gesetzt wird."
+
+#~ msgid "There are three supported values for this option:"
+#~ msgstr "Für diese Option werden drei Werte unterstützt:"
+
+#~ msgid ""
+#~ "disabled: GPO-based access control rules are neither evaluated nor "
+#~ "enforced."
+#~ msgstr ""
+#~ "disabled: GPO-basierte Zugriffskontrollregeln werden weder ausgewertet "
+#~ "noch deren Anwendung erzwungen."
+
+#~ msgid ""
+#~ "enforcing: GPO-based access control rules are evaluated and enforced."
+#~ msgstr ""
+#~ "enforcing: GPO-basierte Zugriffskontrollregeln werden sowohl ausgewertet "
+#~ "als auch deren Anwendung erzwungen."
+
+#~ msgid ""
+#~ "permissive: GPO-based access control rules are evaluated, but not "
+#~ "enforced. Instead, a syslog message will be emitted indicating that the "
+#~ "user would have been denied access if this option's value were set to "
+#~ "enforcing."
+#~ msgstr ""
+#~ "permissive: GPO-basierte Zugriffskontrollregeln werden zwar ausgewertet, "
+#~ "aber deren Anwendung nicht erzwungen. Stattdessen wird eine Meldung an "
+#~ "das Systemprotokoll ausgelöst, mit dem Inhalt, dass dem Benutzer der "
+#~ "Zugriff verweigert werden würde, wenn die Option auf »enforcing« gesetzt "
+#~ "wäre."
+
+#~ msgid "Default: permissive"
+#~ msgstr "Voreinstellung: permissive"
+
+#~ msgid ""
+#~ "Optional. This option tells SSSD to automatically update the Active "
+#~ "Directory DNS server with the IP address of this client. The update is "
+#~ "secured using GSS-TSIG. As a consequence, the Active Directory "
+#~ "administrator only needs to allow secure updates for the DNS zone. The IP "
+#~ "address of the AD LDAP connection is used for the updates, if it is not "
+#~ "otherwise specified by using the <quote>dyndns_iface</quote> option."
+#~ msgstr ""
+#~ "Optional. Diese Option teilt SSSD mit, dass es den Active-Directory-DNS-"
+#~ "Server mit der IP-Adresse dieses Clients aktualisieren soll. Die "
+#~ "Aktualisierung wird mittels GSS-TSIG abgesichert. Infolgedessen muss der "
+#~ "Active-Directory-Verwalter nur sichere Aktualisierungen für die DNS-Zone "
+#~ "erlauben. Die IP-Adresse der AD-LDAP-Verbindung wird für die "
+#~ "Aktualisierungen verwendet, falls sie nicht anderweitig mittels der "
+#~ "Option »dyndns_iface« angegeben wurde."
+
+#~ msgid "Default: 3600 (seconds)"
+#~ msgstr "Voreinstellung: 3600 (Sekunden)"
+
+#~ msgid "Default: Use the IP address of the AD LDAP connection"
+#~ msgstr "Voreinstellung: verwendet die IP-Adresse der AD-LDAP-Verbindung"
+
+#~ msgid "krb5_use_enterprise_principal (boolean)"
+#~ msgstr "krb5_use_enterprise_principal (Boolesch)"
+
+#~ msgid ""
+#~ "Specifies if the user principal should be treated as enterprise "
+#~ "principal. See section 5 of RFC 6806 for more details about enterprise "
+#~ "principals."
+#~ msgstr ""
+#~ "gibt an, ob der User Principal als Enterprise Principal betrachtet werden "
+#~ "soll. Weitere Informationen über Enterprise Principals finden Sie in "
+#~ "Abschnitt 5 von RFC 6806."
+
+#~ msgid ""
+#~ "However, unless the <quote>ad</quote> access control provider is "
+#~ "explicitly configured, the default access provider is <quote>permit</"
+#~ "quote>."
+#~ msgstr ""
+#~ "Außer wenn der Zugriffssteuerungsanbieter »ad« jedoch explizit "
+#~ "konfiguriert wurde, ist der voreingestellte Zugriffsanbieter »permit«."
+
+#~ msgid ""
+#~ "<emphasis>Note</emphasis>: in order to use netgroups or IPA hostgroups in "
+#~ "sudo rules, you also need to correctly set <citerefentry> "
+#~ "<refentrytitle>nisdomainname</refentrytitle> <manvolnum>1</manvolnum> </"
+#~ "citerefentry> to your NIS domain name (which equals to IPA domain name "
+#~ "when using hostgroups)."
+#~ msgstr ""
+#~ "<emphasis>Hinweis</emphasis>: Um Netzgruppen oder IPA-Hostgruppen in sudo-"
+#~ "Regeln verwenden zu können, muss <citerefentry> "
+#~ "<refentrytitle>nisdomainname</refentrytitle> <manvolnum>1</manvolnum> </"
+#~ "citerefentry> korrekt auf den entsprechenden NIS-Domainnamen gesetzt "
+#~ "werden. Dieser entspricht dem IPA-Domainnamen, wenn Hostgruppen verwendet "
+#~ "werden."
+
+#~ msgid ""
+#~ "All configuration that is needed on SSSD side is to extend the list of "
+#~ "<emphasis>services</emphasis> with \"sudo\" in [sssd] section of "
+#~ "<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry>. To speed up the LDAP lookups, you can also "
+#~ "set search base for sudo rules using <emphasis>ldap_sudo_search_base</"
+#~ "emphasis> option."
+#~ msgstr ""
+#~ "Alle auf der SSSD-Seite erforderliche Konfiguration ist die Erweiterung "
+#~ "der Liste der <emphasis>Dienste</emphasis> mit \"sudo\" im Abschnitt "
+#~ "[sssd] der Handbuchseite zu <citerefentry> <refentrytitle>sssd.conf</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>. Um LDAP-"
+#~ "Suchvorgänge zu beschleunigen, können Sie auch die Suchbasis für sudo-"
+#~ "Regeln mit der Option <emphasis>ldap_sudo_search_base</emphasis> "
+#~ "festlegen."
+
+#~ msgid ""
+#~ "Special files (block devices, character devices, named pipes and unix "
+#~ "sockets) will not be copied."
+#~ msgstr ""
+#~ "Spezialdateien (block- und zeichenorientierte Geräte, benannte Pipes und "
+#~ "Unix-Sockets) werden nicht kopiert."
+
+#~ msgid "SSSD Kerberos provider"
+#~ msgstr "SSSD Kerberos-Anbieter"
+
+#~ msgid ""
+#~ "Directory to store credential caches. All the substitution sequences of "
+#~ "krb5_ccname_template can be used here, too, except %d and %P. The "
+#~ "directory is created as private and owned by the user, with permissions "
+#~ "set to 0700."
+#~ msgstr ""
+#~ "Das Verzeichnis zum Ablegen von Anmeldedaten-Zwischenspeichern. Alle "
+#~ "Ersetzungssequenzen von krb5_ccname_template können hier auch verwendet "
+#~ "werden, außer %d und %P. Das Verzeichnis wird als privat angelegt und ist "
+#~ "Eigentum des Benutzers. Die Zugriffsrechte werden auf 0700 gesetzt."
+
+#~ msgid ""
+#~ "When using KEYRING types, the only supported mechanism is <quote>KEYRING:"
+#~ "persistent:%U</quote>, which uses the Linux kernel keyring to store "
+#~ "credentials on a per-UID basis. This is also the recommended choice, as "
+#~ "it is the most secure and predictable method."
+#~ msgstr ""
+#~ "Wenn der KEYRING-Typ verwendet wird, ist <quote>KEYRING:persistent:%U</"
+#~ "quote> der einzige unterstützte Mechanismus. Hierfür wird der "
+#~ "Schlüsselbund des Linux-Kernels zum Speichern der Anmeldedaten getrennt "
+#~ "nach Benutzer-IDs verwendet. Dies wird auch empfohlen, da es die "
+#~ "sicherste und vorausberechenbarste Methode ist."
+
+#~ msgid ""
+#~ "The default value for the credential cache name is sourced from the "
+#~ "profile stored in the system wide krb5.conf configuration file in the "
+#~ "[libdefaults] section. The option name is default_ccache_name. See krb5."
+#~ "conf(5)'s PARAMETER EXPANSION paragraph for additional information on the "
+#~ "expansion format defined by krb5.conf."
+#~ msgstr ""
+#~ "Der Vorgabewert für den Anmeldedaten-Zwischenspeicher wird aus dem im "
+#~ "Abschnitt [libdefaults] der Datei krb5.conf enthaltenen Profil der "
+#~ "systemweiten Konfiguration bezogen. Der Name der Option ist "
+#~ "default_ccache_name. Im Abschnitt PARAMETER EXPANSION der Handbuchseite "
+#~ "zu krb5.conf(5) finden Sie zusätzliche Informationen zu dem in krb5.conf "
+#~ "definierten Format."
+
+#~ msgid "Default: (from libkrb5)"
+#~ msgstr "Voreinstellung: (aus libkrb5)"
+
+#~ msgid "Default: false (AD provider: true)"
+#~ msgstr "Voreinstellung: falsch (AD-Anbieter: wahr)"
+
+#~ msgid "<option>--addattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--addattr</option> <replaceable>ATTR_NAME_WERT</replaceable>"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Ein Attribut/Wert-Paar hinzufügen. Das Format ist Attributname=Wert."
+
+#~ msgid "<option>--setattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--setattr</option> <replaceable>ATTR_NAME_WERT</replaceable>"
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Ein Attribut auf ein Name/Wert-Paar setzen. Das Format ist "
+#~ "Attributname=Wert. Bei Attributen mit mehreren Werten ersetzt der Befehl "
+#~ "die bereits vorhandenen Werte."
+
+#~ msgid "<option>--delattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--delattr</option> <replaceable>ATTR_NAME_WERT</replaceable>"
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Ein Attribut/Wert-Paar löschen. Das Format ist Attributname=Wert."
+
+#~ msgid "<option>-E</option>,<option>--everything</option>"
+#~ msgstr "<option>-E</option>,<option>--everything</option>"
+
+#~ msgid "Invalidate all cached entries except for sudo rules."
+#~ msgstr ""
+#~ "annulliert alle zwischengespeicherten Einträge mit Ausnahme von Sudo-"
+#~ "Regeln."
+
+#~ msgid "sssd-ifp"
+#~ msgstr "sssd-ifp"
+
+#~ msgid "SSSD InfoPipe responder"
+#~ msgstr "SSSD InfoPipe-Responder"
+
+#~ msgid ""
+#~ "This manual page describes the configuration of the InfoPipe responder "
+#~ "for <citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry>. For a detailed syntax reference, refer to "
+#~ "the <quote>FILE FORMAT</quote> section of the <citerefentry> "
+#~ "<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry> manual page."
+#~ msgstr ""
+#~ "Diese Handbuchseite beschreibt die Konfiguration des InfoPipe-Responders "
+#~ "für <citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry>. Eine detaillierte Syntaxreferenz finden Sie "
+#~ "im Abschnitt <quote>DATEIFORMAT</quote> in der Handbuchseite zu "
+#~ "<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry>."
+
+#~ msgid ""
+#~ "The InfoPipe responder provides a public D-Bus interface accessible over "
+#~ "the system bus. The interface allows the user to query information about "
+#~ "remote users and groups over the system bus."
+#~ msgstr ""
+#~ "Der InfoPipe-Responder stellt eine öffentliche D-Bus-Schnittstelle "
+#~ "bereit, auf die über den Systembus zugegriffen werden kann. Die "
+#~ "Schnittstelle ermöglicht die Abfrage von Informationen zu entfernten "
+#~ "Benutzern und Gruppen über den Systembus."
+
+#~ msgid "These options can be used to configure the InfoPipe responder."
+#~ msgstr ""
+#~ "Diese Optionen können zur Konfiguration des InfoPipe-Responders verwendet "
+#~ "werden."
+
+#~ msgid ""
+#~ "Specifies the comma-separated list of UID values or user names that are "
+#~ "allowed to access the InfoPipe responder. User names are resolved to UIDs "
+#~ "at startup."
+#~ msgstr ""
+#~ "Gibt eine durch Kommata getrennte Liste der Benutzer-ID-Werte oder "
+#~ "Benutzernamen an, denen der Zugriff auf den InfoPipe-Responder erlaubt "
+#~ "ist. Benutzernamen werden beim Start in Benutzer-IDs aufgelöst."
+
+#~ msgid ""
+#~ "Default: 0 (only the root user is allowed to access the InfoPipe "
+#~ "responder)"
+#~ msgstr ""
+#~ "Voreinstellung: 0 (nur der Benutzer »root« darf auf den InfoPipe-"
+#~ "Responder zugreifen)"
+
+#~ msgid ""
+#~ "Please note that although the UID 0 is used as the default it will be "
+#~ "overwritten with this option. If you still want to allow the root user to "
+#~ "access the InfoPipe responder, which would be the typical case, you have "
+#~ "to add 0 to the list of allowed UIDs as well."
+#~ msgstr ""
+#~ "Beachten Sie, dass trotz der Verwendung der Benutzer-ID 0 als "
+#~ "Voreinstellung diese durch die Option überschrieben wird. Falls Sie "
+#~ "wollen, dass dem Root-Benutzer der Zugriff auf den InfoPipe-Responder "
+#~ "gewährt werden soll, was der typische Fall ist, müssen Sie 0 ebenfalls "
+#~ "zur Liste der erlaubten Benutzer-IDs hinzufügen."
+
+#~ msgid "user_attributes (string)"
+#~ msgstr "user_attributes (Zeichenkette)"
+
+#~ msgid ""
+#~ "Specifies the comma-separated list of white or blacklisted attributes."
+#~ msgstr ""
+#~ "Gibt eine durch Kommata getrennte Liste der auf die weiße (erlaubt) "
+#~ "beziehungsweise schwarze Liste (blockiert) gesetzten Attribute an."
+
+#~ msgid "name"
+#~ msgstr "name"
+
+#~ msgid "user's login name"
+#~ msgstr "Anmeldename des Benutzers"
+
+#~ msgid "uidNumber"
+#~ msgstr "uidNumber"
+
+#~ msgid "user ID"
+#~ msgstr "Benutzer-ID"
+
+#~ msgid "gidNumber"
+#~ msgstr "gidNumber"
+
+#~ msgid "primary group ID"
+#~ msgstr "primäre Gruppen-ID"
+
+#~ msgid "gecos"
+#~ msgstr "gecos"
+
+#~ msgid "user information, typically full name"
+#~ msgstr "Benutzerinformation, typischerweise der vollständige Name"
+
+#~ msgid "homeDirectory"
+#~ msgstr "homeDirectory"
+
+#~ msgid "loginShell"
+#~ msgstr "loginShell"
+
+#~ msgid "user shell"
+#~ msgstr "Benutzershell"
+
+#~ msgid ""
+#~ "By default, the InfoPipe responder only allows the default set of POSIX "
+#~ "attributes to be requested. This set is the same as returned by "
+#~ "<citerefentry> <refentrytitle>getpwnam</refentrytitle> <manvolnum>3</"
+#~ "manvolnum> </citerefentry> and includes: <placeholder type=\"variablelist"
+#~ "\" id=\"0\"/>"
+#~ msgstr ""
+#~ "In der Voreinstellung erlaubt der InfoPipe-Responder nur die Abfrage des "
+#~ "Standardsatzes an POSIX-Attributen. Dieser Satz ist der gleiche, wie er "
+#~ "von <citerefentry> <refentrytitle>getpwnam</refentrytitle> <manvolnum>3</"
+#~ "manvolnum> </citerefentry> zurückgegeben wird und enthält Folgendes: "
+#~ "<placeholder type=\"variablelist\" id=\"0\"/>"
+
+#~ msgid ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+#~ msgstr ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+
+#~ msgid ""
+#~ "It is possible to add another attribute to this set by using <quote>"
+#~ "+attr_name</quote> or explicitly remove an attribute using <quote>-"
+#~ "attr_name</quote>. For example, to allow <quote>telephoneNumber</quote> "
+#~ "but deny <quote>loginShell</quote>, you would use the following "
+#~ "configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
+#~ msgstr ""
+#~ "Es ist möglich, ein weiteres Attribut zu diesem Satz hinzuzufügen, indem "
+#~ "Sie <quote>+attr_name</quote> verwenden. Explizit entfernen lässt sich "
+#~ "ein Attribut mit <quote>-attr_name</quote>. Um beispielsweise "
+#~ "<quote>telephoneNumber</quote> zu erlauben, aber <quote>loginShell</"
+#~ "quote> abzuweisen, können Sie folgende Konfiguration verwenden: "
+#~ "<placeholder type=\"programlisting\" id=\"0\"/>"
+
+#~ msgid ""
+#~ "Default: not set. Only the default set of POSIX attributes is allowed."
+#~ msgstr ""
+#~ "Voreinstellung: Nicht gesetzt. Nur der Standardsatz an POSIX-Attributen "
+#~ "ist erlaubt."
+
+#~ msgid "EXIT STATUS"
+#~ msgstr "EXIT-STATUS"
+
+#~ msgid ""
+#~ "In case of success, an exit value of 0 is returned. Otherwise, 1 is "
+#~ "returned."
+#~ msgstr ""
+#~ "Im Erfolgsfall ist der Rückgabewert 0, andernfalls wird 1 zurückgegeben."
+
+#~ msgid ""
+#~ "Please note that changing the ID mapping related configuration options "
+#~ "will cause user and group IDs to change. At the moment, SSSD does not "
+#~ "support changing IDs, so the SSSD database must be removed. Because "
+#~ "cached passwords are also stored in the database, removing the database "
+#~ "should only be performed while the authentication servers are reachable, "
+#~ "otherwise users might get locked out. In order to cache the password, an "
+#~ "authentication must be performed. It is not sufficient to use "
+#~ "<citerefentry> <refentrytitle>sss_cache</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> to remove the database, rather the process "
+#~ "consists of:"
+#~ msgstr ""
+#~ "Bitte beachten Sie, dass die Änderung der die ID-Abbildung betreffenden "
+#~ "Konfigurationsoptionen auch die Änderung der Benutzer- und Gruppen-IDs "
+#~ "nach sich zieht. Momentan unterstützt SSSD die Änderung der IDs nicht, "
+#~ "daher muss die Datenbank entfernt werden. Da auch zwischengespeicherte "
+#~ "Passwörter in der Datenbank enthalten sind, sollte diese nur entfernt "
+#~ "werden, während die Authentifizierungsserver erreichbar sind, "
+#~ "anderenfalls könnten Benutzer ausgesperrt werden. Um das Passwort "
+#~ "zwischenzuspeichern, muss eine Authentifizierung ausgeführt werden. Es "
+#~ "reicht nicht aus, <citerefentry> <refentrytitle>sss_cache</refentrytitle> "
+#~ "<manvolnum>8</manvolnum> </citerefentry> zum Löschen der Datenbank "
+#~ "auszuführen, vielmehr sind folgende Schritte erforderlich:"
+
+#~ msgid "Making sure the remote servers are reachable"
+#~ msgstr "Stellen Sie sicher, dass entfernte Server erreichbar sind."
+
+#~ msgid "Stopping the SSSD service"
+#~ msgstr "Stoppen Sie den SSSD-Dienst."
+
+#~ msgid "Removing the database"
+#~ msgstr "Entfernen Sie die Datenbank."
+
+#~ msgid "Starting the SSSD service"
+#~ msgstr "Starten Sie den SSSD-Dienst."
+
+#~ msgid ""
+#~ "Moreover, as the change of IDs might necessitate the adjustment of other "
+#~ "system properties such as file and directory ownership, it's advisable to "
+#~ "plan ahead and test the ID mapping configuration thoroughly."
+#~ msgstr ""
+#~ "Außerdem ist es ratsam, vorauszuplanen und die ID-Abbildung gründlich zu "
+#~ "testen, da die Änderung der IDs Änderungen anderer Systemeigenschaften "
+#~ "nach sich ziehen könnte, wie die Besitzverhältnisse von Dateien und "
+#~ "Verzeichnissen."
+
+#~ msgid ""
+#~ "NOTE: The value of this option must be at least as large as the highest "
+#~ "user RID planned for use on the Active Directory server. User lookups and "
+#~ "login will fail for any user whose RID is greater than this value."
+#~ msgstr ""
+#~ "HINWEIS: Der Wert dieser Option muss mindestens so groß sein wie die "
+#~ "größte Benutzer-RID, die jemals auf dem Active-Directory-Server verwendet "
+#~ "werden soll. Das Nachschlagen und Anmelden von Benutzern wird scheitern, "
+#~ "wenn deren RIDs größer sind als dieser Wert."
+
+#~ msgid ""
+#~ "For example, if your most recently-added Active Directory user has "
+#~ "objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, "
+#~ "<quote>ldap_idmap_range_size</quote> must be at least 1107."
+#~ msgstr ""
+#~ "Wenn beispielsweise der zuletzt hinzugefügte Active-Directory-Benutzer "
+#~ "objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107 hat, muss "
+#~ "<quote>ldap_idmap_range_size</quote> mindestens 1107 sein."
+
+#~ msgid ""
+#~ "It is important to plan ahead for future expansion, as changing this "
+#~ "value will result in changing all of the ID mappings on the system, "
+#~ "leading to users with different local IDs than they previously had."
+#~ msgstr ""
+#~ "Es ist wichtig, für spätere Erweiterungen vorauszuplanen, da die Änderung "
+#~ "dieses Wertes zur Änderung aller ID-Abbildungen des Systems führt. "
+#~ "Dadurch können Benutzer andere lokale IDs als vorher haben."
+
+#~ msgid "Well-Known SIDs"
+#~ msgstr "Bekannte Sicherheits-IDs"
+
+#~ msgid ""
+#~ "SSSD supports to look up the names of Well-Known SIDs, i.e. SIDs with a "
+#~ "special hardcoded meaning. Since the generic users and groups related to "
+#~ "those Well-Known SIDs have no equivalent in a Linux/UNIX environment no "
+#~ "POSIX IDs are available for those objects."
+#~ msgstr ""
+#~ "SSSD unterstützt das Nachschlagen der Namen sogenannter bekannter "
+#~ "Sicherheits-IDs, die eine spezielle unveränderliche Bedeutung haben. Da "
+#~ "generische Benutzer und Gruppen, die sich auf diese bekannten SIDs "
+#~ "beziehen, keine Entsprechung in einer Linux/UNIX-Umgebung haben, sind für "
+#~ "diese Objekte keine POSIX-IDs verfügbar."
+
+#~ msgid ""
+#~ "The SID name space is organized in authorities which can be seen as "
+#~ "different domains. The authorities for the Well-Known SIDs are"
+#~ msgstr ""
+#~ "Der SID-Namensraum ist in Autoritäten organisiert, die als "
+#~ "unterschiedliche Domains betrachtet werden können. Die Autoritäten für "
+#~ "die bekannten SIDs sind"
+
+#~ msgid "Null Authority"
+#~ msgstr "Null-Autorität (Null Authority)"
+
+#~ msgid "World Authority"
+#~ msgstr "Weltweit anerkannte Autorität (World Authority)"
+
+#~ msgid "Local Authority"
+#~ msgstr "Lokale Autorität (Local Authority)"
+
+#~ msgid "Creator Authority"
+#~ msgstr "Ersteller-Autorität (Creator Authority)"
+
+#~ msgid "NT Authority"
+#~ msgstr "NT-Autorität (NT Authority)"
+
+#~ msgid "Built-in"
+#~ msgstr "Eingebaut"
+
+#~ msgid ""
+#~ "The capitalized version of these names are used as domain names when "
+#~ "returning the fully qualified name of a Well-Known SID."
+#~ msgstr ""
+#~ "Die mit großem Anfangsbuchstaben geschriebenen Versionen dieser Namen "
+#~ "werden als Domainnamen verwendet, wenn der voll qualifizierte Name einer "
+#~ "bekannten Sicherheits-ID zurückgegeben wird."
+
+#~ msgid ""
+#~ "Since some utilities allow to modify SID based access control information "
+#~ "with the help of a name instead of using the SID directly SSSD supports "
+#~ "to look up the SID by the name as well. To avoid collisions only the "
+#~ "fully qualified names can be used to look up Well-Known SIDs. As a result "
+#~ "the domain names <quote>NULL AUTHORITY</quote>, <quote>WORLD AUTHORITY</"
+#~ "quote>, <quote> LOCAL AUTHORITY</quote>, <quote>CREATOR AUTHORITY</"
+#~ "quote>, <quote>NT AUTHORITY</quote> and <quote>BUILTIN</quote> should not "
+#~ "be used as domain names in <filename>sssd.conf</filename>."
+#~ msgstr ""
+#~ "Da einige Dienstprogramme die Änderung der Sicherheits-ID-basierten "
+#~ "Zugriffskontrollinformationen mit Hilfe des Namens ermöglichen, anstelle "
+#~ "die Sicherheits-ID direkt zu verwenden, unterstützt SSSD die Suche nach "
+#~ "der SID anhand des Namens ebenfalls. Um Überschneidungen zu vermeiden, "
+#~ "können nur voll qualifizierte Namen bei der Suche nach bekannten "
+#~ "Sicherheit-IDs verwendet werden. Daher sollten die Domainnamen "
+#~ "<quote>NULL AUTHORITY</quote>, <quote>WORLD AUTHORITY</quote>, <quote> "
+#~ "LOCAL AUTHORITY</quote>, <quote>CREATOR AUTHORITY</quote>, <quote>NT "
+#~ "AUTHORITY</quote> und <quote>BUILTIN</quote> nicht als Domainnamen in "
+#~ "<filename>sssd.conf</filename> verwendet werden."
+
+#~ msgid ""
+#~ "SSSD supports two representations for specifying the debug level. The "
+#~ "simplest is to specify a decimal value from 0-9, which represents "
+#~ "enabling that level and all lower-level debug messages. The more "
+#~ "comprehensive option is to specify a hexadecimal bitmask to enable or "
+#~ "disable specific levels (such as if you wish to suppress a level)."
+#~ msgstr ""
+#~ "SSSD unterstützt zwei Darstellungsmodi für die Angabe der Debug-Stufe. "
+#~ "Die einfachste ist die Angabe eines Dezimalwerts von 0 bis 9, welche die "
+#~ "Aktivierung der Meldungen der entsprechenden Stufe und aller niederer "
+#~ "Stufen bewirkt. Eine umfassendere Option ist die Angabe einer "
+#~ "hexadezimalen Bitmaske, um spezifische Stufen zu aktivieren oder zu "
+#~ "deaktivieren (wenn Sie beispielsweise eine Stufe unterdrücken wollen)."
+
+#~ msgid "<emphasis>Default</emphasis>: 0"
+#~ msgstr "<emphasis>Voreinstellung</emphasis>: 0"
+
+#~ msgid ""
+#~ "The scope can be one of \"base\", \"onelevel\" or \"subtree\". The scope "
+#~ "functions as specified in section 4.5.1.2 of http://tools.ietf.org/html/"
+#~ "rfc4511"
+#~ msgstr ""
+#~ "Der Bereich kann entweder »base«, »onlevel« oder »subtree« sein. Die "
+#~ "Bereiche funktionieren wie im Abschnitt 4.5.1.2 auf http://tools.ietf.org/"
+#~ "html/rfc4511 angegeben."
+
+#~ msgid "%H"
+#~ msgstr "%H"
+
+#~ msgid ""
+#~ "The value of configure option <emphasis>homedir_substring</emphasis>."
+#~ msgstr ""
+#~ "Der Wert der Konfigurationsoption <emphasis>homedir_substring</emphasis>."
+
+#~ msgid ""
+#~ "override_homedir = /home/%u\n"
+#~ " "
+#~ msgstr ""
+#~ "override_homedir = /home/%u\n"
+#~ " "
+
+#~ msgid "homedir_substring (string)"
+#~ msgstr "homedir_substring (Zeichenkette)"
+
+#~ msgid ""
+#~ "The value of this option will be used in the expansion of the "
+#~ "<emphasis>override_homedir</emphasis> option if the template contains the "
+#~ "format string <emphasis>%H</emphasis>. An LDAP directory entry can "
+#~ "directly contain this template so that this option can be used to expand "
+#~ "the home directory path for each client machine (or operating system). It "
+#~ "can be set per-domain or globally in the [nss] section. A value specified "
+#~ "in a domain section will override one set in the [nss] section."
+#~ msgstr ""
+#~ "Der Wert dieser Option wird als Auflösung der Option "
+#~ "<emphasis>override_homedir</emphasis> verwendet, falls die Vorlage die "
+#~ "Formatzeichenkette <emphasis>%H</emphasis> enthält. Ein LDAP-"
+#~ "Verzeichniseintrag kann diese Schablone direkt enthalten, so dass diese "
+#~ "Option zum Auflösen des Pfades zum Home-Verzeichnis für jeden Client-"
+#~ "Rechner (oder Betriebssystem) verwendet werden kann. Sie kann pro-Domain "
+#~ "oder global im Abschnitt [nss] gesetzt werden. Ein im Domain-Abschnitt "
+#~ "angegebener Wert setzt jenen im [nss]-Abschnitt außer Kraft."
+
+#~ msgid "Default: /home"
+#~ msgstr "Voreinstellung: /home"
diff --git a/src/man/po/es.po b/src/man/po/es.po
index 89fbcd890..fc812fe8b 100644
--- a/src/man/po/es.po
+++ b/src/man/po/es.po
@@ -3,9 +3,9 @@
# This file is distributed under the same license as the sssd-docs package.
#
# Translators:
-# Adolfo Jayme Barrientos <fitoschido@ubuntu.com>, 2012
-# Gumbo72 <carlosantolin@hotmail.es>, 2012
-# Domingo Becker <domingobecker@gmail.com>, 2013
+# Adolfo Jayme Barrientos <fito@libreoffice.org>, 2012
+# Carlos Antolín Lucas <carlosantolin@hotmail.es>, 2012
+# beckerde <domingobecker@gmail.com>, 2013
# Eduardo Villagrán M <gotencool@gmail.com>, 2011
# Eduardo Villagrán M <gotencool@gmail.com>, 2011
# vareli <ehespinosa@ya.com>, 2013
@@ -15,10 +15,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Spanish (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Spanish (http://www.transifex.com/projects/p/sssd/language/"
"es/)\n"
"Language: es\n"
"MIME-Version: 1.0\n"
@@ -280,10 +280,6 @@ msgid ""
"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
"phrase>"
msgstr ""
-"Servicios soportados: nss, pam <phrase condition=\"with_sudo\">, sudo</"
-"phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
-"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
-"\">, pac</phrase>"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
@@ -889,12 +885,15 @@ msgstr "Esta opción puede ser también fijada por dominio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "fallback_homedir = /home/%u\n"
+#| " "
msgid ""
"override_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
@@ -946,8 +945,6 @@ msgid ""
"Override the login shell for all users. This option can be specified "
"globally in the [nss] section or per-domain."
msgstr ""
-"Anula la shell de acceso de todos los usuarios. Esta opción puede ser "
-"especificada globalmente en la sección [nss] o por dominio."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:532
@@ -1050,9 +1047,6 @@ msgid ""
"This option supersedes any other shell options if it takes effect and can be "
"set either in the [nss] section or per-domain."
msgstr ""
-"La shell por defecto a usar si el proveedor no devuelve una durante la "
-"búsqueda. Esta opción reemplaza cualquier otra opción de shell si toman "
-"efecto y puede fijada en la sección [nss] o por dominio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
@@ -1304,8 +1298,10 @@ msgstr "SUDO opciones de configuración"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure the autofs service."
msgid "These options can be used to configure the sudo service."
-msgstr "Estas opciones pueden ser usadas para configurar el servicio sudo."
+msgstr "Estas opciones pueden ser usadas para configurar el servicio autofs."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -1715,10 +1711,16 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1110
+#, fuzzy
+#| msgid ""
+#| "Specifies how many seconds SSSD has to wait before refreshing its cache "
+#| "of enumerated records."
msgid ""
"Specifies how many seconds SSSD has to wait before refreshing expired "
"records. Currently only refreshing expired netgroups is supported."
msgstr ""
+"Especifica cuantos segundos SSSD tiene que esperar antes de refrescar su "
+"escondrijo de los registros enumerados."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1115
@@ -4922,13 +4924,6 @@ msgid ""
"set, it will result in all users being denied access. Use access_provider = "
"permit to change this default behavior."
msgstr ""
-"Si se usa access_provider = ldap and ldap_access_order = filter (por "
-"defecto), esta opción es obligatoria. Especifica un criterio de filtro de "
-"búsqueda LDAP que debe ser encontrado para que el usuario obtenga acceso en "
-"este host. Si access_provider = ldap, ldap_access_order = filter y esta "
-"opción no está fijada, resultará que se denegará el acceso a todos los "
-"usuarios. Use access_provider = permit para cambiar este comportamiento por "
-"defecto."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
@@ -4943,9 +4938,6 @@ msgid ""
"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
" "
msgstr ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1699
@@ -4953,8 +4945,6 @@ msgid ""
"This example means that access to this host is restricted to members of the "
"\"allowedusers\" group in ldap."
msgstr ""
-"Este ejemplo significa que el acceso a este host está restringido a miembros "
-"del grupo “allowedusers” en ldap."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1704
@@ -5661,10 +5651,6 @@ msgid ""
"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
"\"variablelist\" id=\"4\"/>"
msgstr ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2243
@@ -5688,8 +5674,10 @@ msgstr "ldap_group_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr "ldap_user_search_filter (cadena)"
+msgstr "ldap_user_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -5697,8 +5685,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict user searches."
msgstr ""
-"Esta opción especifica un criterio de filtro de búsqueda LDAP adicional que "
-"restringe las búsquedas del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2272
@@ -5706,8 +5692,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_user_search_base."
msgstr ""
-"Esta opción está <emphasis>obsoleta</emphasis> en favor de la sintaxis "
-"utilizada por ldap_user_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:2282
@@ -5716,8 +5700,6 @@ msgid ""
" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
" "
msgstr ""
-" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2285
@@ -5725,13 +5707,13 @@ msgid ""
"This filter would restrict user searches to users that have their shell set "
"to /bin/tcsh."
msgstr ""
-"Este filtro restringiría las búsquedas del usuario a los usuario que tengan "
-"su shell fijado en /bin/tcsh."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr "ldap_group_search_filter (cadena)"
+msgstr "ldap_group_search_base (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5739,8 +5721,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict group searches."
msgstr ""
-"Esta opción especifica un criterio de filtro de búsqueda LDAP adicional que "
-"restringe las búsquedas de grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2299
@@ -5748,8 +5728,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_group_search_base."
msgstr ""
-"Esta opción está <emphasis>obsoleta</emphasis> en favor de la sintaxis "
-"utilizada por ldap_user_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2309
@@ -5851,6 +5829,12 @@ msgstr "Módulo PAM para SSSD"
#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: pam_sss.8.xml:24
+#, fuzzy
+#| msgid ""
+#| "<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+#| "replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+#| "replaceable></arg> <arg choice='plain'>-n <replaceable>USER</"
+#| "replaceable></arg>"
msgid ""
"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
@@ -5859,11 +5843,9 @@ msgid ""
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
"arg>"
msgstr ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
"arg>"
#. type: Content of: <reference><refentry><refsect1><para>
@@ -6038,17 +6020,6 @@ msgid ""
"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>"
msgstr ""
-"El plugin localizador Kerberos <command>sssd_krb5_locator_plugin</command> "
-"se usa por el proveedor Kerberos de <citerefentry> <refentrytitle>sssd</"
-"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> para decir a las "
-"librerías Kerberos que Reino y que KDC usar. Normalmente esto se hace en "
-"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> que es siempre leído por las librerías Kerberos. "
-"Para simplificar la configuración del Reino y el KDC puede ser definido en "
-"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
-"manvolnum> </citerefentry> como se describe en <citerefentry> "
-"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>"
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:48
@@ -6482,9 +6453,6 @@ msgid ""
"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
"will be ignored."
msgstr ""
-"Si se dan filtros en alguna base de búsqueda y "
-"<emphasis>ipa_hbac_support_srchost</emphasis> está fijado a False, el filtro "
-"será ingnorado."
#. type: Content of: <listitem><para>
#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
@@ -6653,15 +6621,17 @@ msgstr "Predeterminado: DENY_ALL"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:333
+#, fuzzy
+#| msgid "ldap_sudo_use_host_filter (boolean)"
msgid "ipa_hbac_support_srchost (boolean)"
-msgstr "ipa_hbac_support_srchost (boolean)"
+msgstr "ldap_sudo_use_host_filter (booleano)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:336
msgid ""
"If this is set to false, then srchost as given to SSSD by PAM will be "
"ignored."
-msgstr "Si se fija a false, el host fuente dado a SSSD por PAM será ignorado."
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:340
@@ -6669,9 +6639,6 @@ msgid ""
"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
msgstr ""
-"Advierta que si la fija a <emphasis>False</emphasis>, esta opción causa que "
-"los filtros dados en <emphasis>ipa_host_search_base</emphasis> sean "
-"ignorados;"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:351
@@ -6690,271 +6657,372 @@ msgstr "Por defecto: La localización llamada “default”"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr "ipa_netgroup_member_of (cadena)"
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr "El atributo LDAP que lista los afiliados del grupo de red."
+msgstr "El atributo LDAP que lista los afiliación a grupo de usario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr "ipa_netgroup_member_user (cadena)"
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid ""
"The LDAP attribute that lists system users and groups that are direct "
"members of the netgroup."
-msgstr ""
-"El atributo LDAP que lista los usuarios del sistema y grupos que son "
-"miembros directos del grupo de red."
+msgstr "El atributo LDAP que lista los afiliación a grupo de usario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberUser"
-msgstr "Predeterminado: memberUser"
+msgstr "Predeterminado: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr "ipa_netgroup_member_host (cadena)"
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists hosts and host groups that are direct members "
"of the netgroup."
msgstr ""
-"El atributo LDAP que lista los host y grupos de host que son miembros "
-"directos del grupo de red."
+"El atributo LDAP que contiene los nombres de los miembros de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberHost"
-msgstr "Predeterminado: memberHost"
+msgstr "Predeterminado: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr "ipa_netgroup_member_ext_host (cadena)"
+msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists FQDNs of hosts and host groups that are "
"members of the netgroup."
msgstr ""
-"El atributo LDAP que lista los FQDNs de host y grupos de host que son "
-"miembros del grupo de red."
+"El atributo LDAP que contiene los nombres de los miembros de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr "Predeterminado: externalHost"
+msgstr "Predeterminado: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr "ipa_netgroup_domain (cadena)"
+msgstr "ipa_domain (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid "The LDAP attribute that contains NIS domain name of the netgroup."
msgstr ""
-"El atributo LDAP que contiene el nombre de dominio NIS del grupo de red."
+"El atributo LDAP que contiene los nombres de los miembros de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr "Predeterminado: nisDomainName"
+msgstr "Predeterminado: none"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_host_object_class (string)"
-msgstr "ipa_host_object_class (cadena)"
+msgstr "ldap_user_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
msgid "The object class of a host entry in LDAP."
-msgstr "El objeto clase de una entrada host en LDAP."
+msgstr "La clase de objeto de una entrada de usuario en LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: ipaHost"
-msgstr "Predeterminado: ipaHost"
+msgstr "Default: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr "ipa_host_fqdn (cadena)"
+msgstr "ipa_hostname (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains FQDN of the host."
-msgstr "El atributo LDAP que contiene el FQDN del host."
+msgstr "El atributo LDAP que contiene los nombres de los miembros del grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr "Por defecto: fqdn"
+msgstr "Predeterminado: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ipa_selinux_usermap_object_class (cadena)"
+msgstr "ldap_user_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr "ipa_selinux_usermap_name (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr "El atributo LDAP que contiene el nombre del mapa de usuario SELinux."
+msgstr "El atributo LDAP que contiene los nombres de los miembros del grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_selinux_usermap_member_user (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid ""
"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-"El atributo LDAP que contiene todos los usuarios / grupos contra los que "
-"esta regla coincide."
+msgstr "El atributo LDAP que contiene las claves públicas SSH del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_selinux_usermap_member_host (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
msgid ""
"The LDAP attribute that contains all hosts / hostgroups this rule match "
"against."
msgstr ""
-"El atributo LDAP que contiene todos los hosts /grupos de hosts contra los "
-"que esta regla coincide."
+"El atributo LDAP que contiene los (host, usuario, dominio) triples de grupo "
+"de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_selinux_usermap_see_also (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that contains DN of HBAC rule which can be used for "
"matching instead of memberUser and memberHost"
msgstr ""
-"El atributo LDAP que contiene la regla DN de HBAC que puede ser usada en "
-"lugar de memberUser o memberHost"
+"El atributo LDAP que contiene los nombres de los miembros de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: ou"
msgid "Default: seeAlso"
-msgstr "Por defecto: seeAlso"
+msgstr "Por defecto: ou"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_selinux_usermap_selinux_user (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr "El atributo LDAP que contiene la cadena de usuario SELinux mismo."
+msgstr "El atributo LDAP que contiene las claves públicas SSH del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: sudoUser"
msgid "Default: ipaSELinuxUser"
-msgstr "Por defecto: ipaSELinuxUser"
+msgstr "Por defecto: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ipa_selinux_usermap_enabled (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid ""
"The LDAP attribute that contains whether or not is user map enabled for "
"usage."
msgstr ""
-"El atributo LDAP que contiene si el mapa de usuario está o no habilitado "
-"para utilización."
+"El atributo LDAP que contiene la ruta de acceso a la shell predeterminada "
+"del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: loginDisabled"
msgid "Default: ipaEnabledFlag"
-msgstr "Por defecto: ipaEnabledFlag"
+msgstr "Predeterminado: loginDisabled"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ipa_selinux_usermap_user_category (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr "El atributo LDAP que contiene la categoría del usuario como ‘all’."
+msgstr "El atributo LDAP que contiene las claves públicas SSH del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: userCategory"
-msgstr "Por defecto: userCategory"
+msgstr "Predeterminado: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ipa_selinux_usermap_host_category (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr "El atributo LDAP que contiene la categoría del host como ‘all’."
+msgstr ""
+"El atributo LDAP que contiene la ruta de acceso a la shell predeterminada "
+"del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: hostCategory"
-msgstr "Por defecto: hostCategory"
+msgstr "Default: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ipa_selinux_usermap_uuid (cadena)"
+msgstr "ipa_selinux_search_base (cadena)Opcional. "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr "El atributo LDAP que contiene la ID única del mapa de usuario."
+msgstr ""
+"El atributo LDAP que contiene el nombre del directorio principal del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr "Por defecto: ipaUniqueID"
+msgstr "Predeterminado: nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ldap_user_ssh_public_key (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_host_ssh_public_key (cadena)"
+msgstr "ldap_user_ssh_public_key (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr "El atributo LDAP que contiene las claves públicas SSH del host."
+msgstr "El atributo LDAP que contiene las claves públicas SSH del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr "Por defecto: ipaSshPubKey"
+msgstr "Predeterminado: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -7078,14 +7146,23 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:57
+#, fuzzy
+#| msgid ""
+#| "However, it is neither necessary nor recommended to set these options. "
+#| "IPA provider can also be used as an access and chpass provider. As an "
+#| "access provider it uses HBAC (host-based access control) rules. Please "
+#| "refer to freeipa.org for more information about HBAC. No configuration of "
+#| "access provider is required on the client side."
msgid ""
"However, it is neither necessary nor recommended to set these options. The "
"AD provider can also be used as an access and chpass provider. No "
"configuration of the access provider is required on the client side."
msgstr ""
-"Sin embargo, no es necesario ni recomendable establecer estas opciones. El "
-"proveedor AD puede ser también usado como un proveedor de acceso y cambio de "
-"contraseña. No se requiere configuración del proveedor de acceso en el lado "
+"Sin embargo, ni es necesario ni está recomendado fijar estas opciones. El "
+"proveedor IPA también puede ser usado como proveedor de acceso y cambio de "
+"contraseña. Como proveedor de acceso usa reglas HBAC (control de acceso "
+"basado en el host). Por favor vea freeipa.org para más información sobre "
+"HBAC. No se requiere configuración del proveedor de acceso en el lado "
"cliente."
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
@@ -7187,15 +7264,12 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:193
-#, fuzzy, no-wrap
-#| msgid ""
-#| "override_homedir = /home/%u\n"
-#| " "
+#, no-wrap
msgid ""
"fallback_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para>
@@ -7724,16 +7798,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:193
-#, fuzzy
-#| msgid ""
-#| "If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-#| "debug messages will be sent to stderr."
msgid ""
"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
"applications will not use the fast in memory cache."
msgstr ""
-"Si la variable de entorno SSSD_KRB5_LOCATOR_DEBUR está fijada a cualquier "
-"valor los mensajes de depuración se enviarán a stderr."
#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
@@ -8174,6 +8242,11 @@ msgid ""
"servers to try, the backend is not switched to operate offline if "
"authentication against the KDC is still possible."
msgstr ""
+"Para más información sobre recuperación de fallos y redundancia de servidor, "
+"consulte la sección de <quote>conmutación por error</quote>. Nota: incluso "
+"si no hay más servidores kpasswd para intentar, y el punto final no está "
+"conmutado para trabajar fuera de línea la autenticación contra el KDC es "
+"todavía posible."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:129
@@ -8245,7 +8318,7 @@ msgstr "directorio home"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:192
msgid "value of krb5ccache_dir"
-msgstr "valor de krb5ccache_dir"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:197
@@ -8272,7 +8345,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:212
msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr "Predeterminado: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:218
@@ -9910,9 +9983,6 @@ msgid ""
"default value as well as the lowest allowed value, 0xFFF0 is the most "
"verbose mode. This setting overrides the settings from config file."
msgstr ""
-"Bit de máscara que indica que niveles de depuración serán visibles. 0x0010 "
-"es el valor por defecto así como el valor más bajo permitido, 0xFFF0 es el "
-"modo más verboso. Este ajuste anula los ajustes del fichero de configuración."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:8
@@ -9925,8 +9995,6 @@ msgid ""
"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
"SSSD from starting up or causes it to cease running."
msgstr ""
-"<emphasis>0x0010</emphasis>: Fallos fatales. Cualquier cosa que evitaría que "
-"SSSD arrancara u origine el cese de la ejecución."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:15
@@ -9935,9 +10003,6 @@ msgid ""
"the SSSD, but one that indicates that at least one major feature is not "
"going to work properly."
msgstr ""
-"<emphasis>0x0020</emphasis>: Fallos críticos. Un error que no matará SSSD, "
-"pero que indica que al menos una de las funciones principales no está "
-"trabajando apropiadamente."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:20
@@ -9945,8 +10010,6 @@ msgid ""
"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
"particular request or operation has failed."
msgstr ""
-"<emphasis>0x0040</emphasis>: Fallos serios. Un error anunciando que una "
-"petición u operación concreta ha fallado."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:24
@@ -9954,32 +10017,43 @@ msgid ""
"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
"percolate down to cause the operation failure of 2."
msgstr ""
-"<emphasis>0x0080</emphasis>: Fallos menores. Estos son errores que podrían "
-"filtrarse hacia abajo para causar fallos en la operación de 2."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid "<emphasis>2</emphasis>: show informational messages"
msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>0x0100</emphasis>: Ajustes de configuración."
+msgstr "<emphasis>2</emphasis>: mostrar mensajes informativos"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>0</emphasis>: do not show any message"
msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>0x0200</emphasis>: Datos de función."
+msgstr "<emphasis>0</emphasis>: no mostrar ningún mensaje"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
msgstr ""
-"<emphasis>0x0400</emphasis>: Traza de mensajes para funciones de operación."
+"<emphasis>3</emphasis>: mostrar todos los mensajes e información de "
+"depuración"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid ""
+#| "<emphasis>Example</emphasis>: To log fatal failures, configuration "
+#| "settings, function data, trace messages for internal control functions "
+#| "use 0x1310."
msgid ""
"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
msgstr ""
-"<emphasis>0x1000</emphasis>: Traza de mensajes para funciones de control "
-"interno."
+"<emphasis>Example</emphasis>: Para registrar fallos fatales, ajustes de "
+"configuración, datos de función, mensajes de traza para funciones de control "
+"interno use 0x1310."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
@@ -9987,15 +10061,15 @@ msgid ""
"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
"may be interesting."
msgstr ""
-"<emphasis>0x2000</emphasis>: Contenidos de variables de función interna que "
-"pueden ser interesantes."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
msgstr ""
-"<emphasis>0x4000</emphasis>: Información de trazado de nivel extremadamente "
-"bajo."
+"<emphasis>3</emphasis>: mostrar todos los mensajes e información de "
+"depuración"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:46
@@ -10003,8 +10077,6 @@ msgid ""
"To log required debug levels, simply add their numbers together as shown in "
"following examples:"
msgstr ""
-"Para registrar los niveles de depuración requeridos, simplemente añada sus "
-"números juntos como se muestra en los siguientes ejemplos:"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:49
@@ -10031,9 +10103,6 @@ msgid ""
"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
msgstr ""
-"<emphasis>Nota</emphasis>: Este es un nuevo formato de niveles de depuración "
-"introducido en 1.7.0. El formato más antiguo (números de 0-10) es compatible "
-"pero obsoleto."
#. type: Content of: outside any tag (error?)
#: include/experimental.xml:1
@@ -10152,14 +10221,17 @@ msgstr "sintaxis: <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:13
#: include/ldap_search_bases_experimental.xml:13
+#, fuzzy
+#| msgid ""
+#| "The filter must be a valid LDAP search filter as specified by http://www."
+#| "ietf.org/rfc/rfc2254.txt"
msgid ""
"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
"rfc2254.txt"
msgstr ""
-"El alcance puede ser uno de \"base\", \"onelevel\" o \"subtree\". El filtro "
-"debe ser un filtro de búsqueda válido LDAP como se especifica en http://www."
-"ietf.org/rfc/rfc2254.txt"
+"El filtro debe ser un filtro de búsqueda LDAP válido como se especifica en "
+"http://www.ietf.org/rfc/rfc2254.txt"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:19
diff --git a/src/man/po/fr.po b/src/man/po/fr.po
index ebe1cb26b..b2d61c86e 100644
--- a/src/man/po/fr.po
+++ b/src/man/po/fr.po
@@ -3,17 +3,20 @@
# This file is distributed under the same license as the sssd-docs package.
#
# Translators:
-# MarbolanGos Fabien <marbolangos@gmail.com>, 2012
-# Jérôme Fenal <jfenal@gmail.com>, 2012-2013
+# Fabien Archambault <marbolangos@gmail.com>, 2012
+# Jérôme Fenal <jfenal@gmail.com>, 2012-2014
+# jhrozek <jhrozek@redhat.com>, 2014
+# Fabien Archambault <marbolangos@gmail.com>, 2012
+# sgallagh <sgallagh@redhat.com>, 2012
# sgallagh <sgallagh@redhat.com>, 2012
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-29 13:10+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-09-24 11:39+0000\n"
"Last-Translator: Jérôme Fenal <jfenal@gmail.com>\n"
-"Language-Team: French (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: French (http://www.transifex.com/projects/p/sssd/language/"
"fr/)\n"
"Language: fr\n"
"MIME-Version: 1.0\n"
@@ -270,6 +273,13 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:89
+#, fuzzy
+#| msgid ""
+#| "Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</"
+#| "phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
+#| "condition=\"with_ssh\">, ssh</phrase> <phrase condition="
+#| "\"with_pac_responder\">, pac</phrase> <phrase condition=\"with_ifp\">, "
+#| "ifp</phrase>"
msgid ""
"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
@@ -277,9 +287,9 @@ msgid ""
"phrase>"
msgstr ""
"Les services pris en charge : nss, pam <phrase condition=\"with_sudo\">, "
-"sudo</phrase> <phrase condition=\"with_autofs\"> autofs</phrase> <phrase "
+"sudo</phrase> <phrase condition=\"with_autofs\"> ,autofs</phrase> <phrase "
"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
-"\">, pac</phrase>"
+"\">, pac</phrase> <phrase condition=\"with_ifp\">, ifp</phrase>"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
@@ -903,12 +913,15 @@ msgstr "Cette option peut aussi être définie pour chaque domaine."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "fallback_homedir = /home/%u\n"
+#| " "
msgid ""
"override_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
@@ -957,13 +970,19 @@ msgstr "override_shell (string)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:527
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
msgid ""
"Override the login shell for all users. This option can be specified "
"globally in the [nss] section or per-domain."
msgstr ""
-"Substitue l'interpréteur de commandes pour tous les utilisateurs. Cette "
-"option peut être spécifiée à l'échelle globale dans la section [nss] ou par "
-"domaine."
+"Écrase l'interpréteur de commande à utiliser pour tous les utilisateurs. "
+"Cette option prend le pas sur toutes les autres options d'interpréteur de "
+"commande si elle est en action, et peut être indiquée au choix soit dans la "
+"section [nss], soit par domaine."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:532
@@ -1070,15 +1089,20 @@ msgstr "default_shell"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:593 sssd-ad.5.xml:206
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
msgid ""
"The default shell to use if the provider does not return one during lookup. "
"This option supersedes any other shell options if it takes effect and can be "
"set either in the [nss] section or per-domain."
msgstr ""
-"L'interpréteur de commande par défaut à utiliser si le fournisseur n'en "
-"donne pas un lors de la recherche. Cette option prend le pas sur toutes les "
-"autres options de shell si elle prend effet, et peut être positionnée soit "
-"dans la section [nss], soit par domaine."
+"Écrase l'interpréteur de commande à utiliser pour tous les utilisateurs. "
+"Cette option prend le pas sur toutes les autres options d'interpréteur de "
+"commande si elle est en action, et peut être indiquée au choix soit dans la "
+"section [nss], soit par domaine."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
@@ -1332,9 +1356,10 @@ msgstr "Options de configuration de SUDO"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure the autofs service."
msgid "These options can be used to configure the sudo service."
-msgstr ""
-"Les options suivantes peuvent être utilisées pour configurer le service sudo."
+msgstr "Ces options peuvent être utilisées pour configurer le service autofs."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -1772,13 +1797,16 @@ msgstr "refresh_expired_interval (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1110
+#, fuzzy
+#| msgid ""
+#| "Specifies how many seconds SSSD has to wait before refreshing its cache "
+#| "of enumerated records."
msgid ""
"Specifies how many seconds SSSD has to wait before refreshing expired "
"records. Currently only refreshing expired netgroups is supported."
msgstr ""
"Spécifie la durée en secondes pendant laquelle SSSD doit attendre avant "
-"d'actualiser les enregistrements expirés. Seuls les netgroup expirés sont "
-"actuellement pris en charge."
+"d'actualiser son cache d\"énumération d'enregistrements."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1115
@@ -2582,21 +2610,21 @@ msgstr "subdomain_homedir (string)"
#: sssd.conf.5.xml:1714
#, fuzzy
#| msgid ""
-#| "Use this homedir as default value for all subdomains within this domain. "
-#| "See <emphasis>override_homedir</emphasis> for info about possible values. "
-#| "In addition to those, the expansion below can only be used with "
-#| "<emphasis>subdomain_homedir</emphasis>. <placeholder type=\"variablelist"
-#| "\" id=\"0\"/>"
+#| "Use this homedir as default value for all subdomains within this domain "
+#| "in IPA AD trust. See <emphasis>override_homedir</emphasis> for info "
+#| "about possible values. In addition to those, the expansion below can only "
+#| "be used with <emphasis>subdomain_homedir</emphasis>. <placeholder type="
+#| "\"variablelist\" id=\"0\"/>"
msgid ""
"Use this homedir as default value for all subdomains within this domain. See "
"<emphasis>override_homedir</emphasis> for info about possible values."
msgstr ""
"Utiliser ce répertoire utilisateur comme valeur par défaut pour tous les "
-"sous-domaines dans ce domaine. Voir <emphasis>override_homedir</emphasis> "
-"pour des informations sur les valeurs possibles. En plus de celles-ci, le "
-"remplacement ci-dessous ne peut être utilisé qu'avec "
-"<emphasis>subdomain_homedir</emphasis>. <placeholder type=\"variablelist\" "
-"id=\"0\"/>"
+"sous-domaines dans cette relation d'approbation Active Directory. Voir "
+"<emphasis>override_homedir</emphasis> pour des informations sur les valeurs "
+"possibles. En plus de celles-ci, le remplacement ci-dessous ne peut être "
+"utilisé qu'avec <emphasis>subdomain_homedir</emphasis>. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1719
@@ -5034,13 +5062,6 @@ msgid ""
"set, it will result in all users being denied access. Use access_provider = "
"permit to change this default behavior."
msgstr ""
-"Cette option est obligatoire lors de l'utilisation de access_provider = ldap "
-"et ldap_access_order = filter (qui sont les valeurs par défaut). Elle "
-"spécifie un critère de filtre de recherche LDAP qui doit être satisfaite "
-"pour que l'utilisateur ait accès à ce système. Si access_provider = ldap, "
-"ldap_access_order = filter et que cette option n'est pas définie, tous les "
-"utilisateurs se verront refuser leurs accès. Utiliser access_provider = "
-"permit de changer ce comportement par défaut."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
@@ -5049,24 +5070,32 @@ msgstr "Exemple:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:1695
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "access_provider = ldap\n"
+#| "ldap_access_filter = (employeeType=admin)\n"
+#| " "
msgid ""
"access_provider = ldap\n"
"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
" "
msgstr ""
"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+"ldap_access_filter = (employeeType=admin)\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1699
+#, fuzzy
+#| msgid ""
+#| "This example means that access to this host is restricted to users whose "
+#| "employeeType attribute is set to \"admin\"."
msgid ""
"This example means that access to this host is restricted to members of the "
"\"allowedusers\" group in ldap."
msgstr ""
-"Cet exemple montre un accès à l'hôte restreint aux membres du groupe LDAP « "
-"allowedusers »."
+"Cet exemple signifie que l'accès à cet hôte est restreint aux utilisateurs "
+"dont l'attribut employeeType est « admin »."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1704
@@ -5769,6 +5798,12 @@ msgstr "Par défaut : automountInformation"
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2170
+#, fuzzy
+#| msgid ""
+#| "<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+#| "\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+#| "<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+#| "\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
msgid ""
"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
@@ -5778,7 +5813,7 @@ msgstr ""
"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
+"\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2243
@@ -5802,8 +5837,10 @@ msgstr "ldap_group_search_base (chaînes)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr "ldap_user_search_filter (chaînes)"
+msgstr "ldap_user_search_base (chaînes)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -5811,8 +5848,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict user searches."
msgstr ""
-"Cette option définit un filtre de recherche LDAP supplémentaire qui "
-"restreint les recherches utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2272
@@ -5820,8 +5855,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_user_search_base."
msgstr ""
-"Cette option est <emphasis>déconseillée</emphasis> en faveur de la syntaxe "
-"utilisée par ldap_user_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:2282
@@ -5830,8 +5863,6 @@ msgid ""
" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
" "
msgstr ""
-" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2285
@@ -5839,13 +5870,13 @@ msgid ""
"This filter would restrict user searches to users that have their shell set "
"to /bin/tcsh."
msgstr ""
-"Ce filtre restreindrait les recherches aux seuls utilisateurs qui ont leur "
-"interpréteur de commande défini en /bin/tcsh."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr "ldap_group_search_filter (chaînes)"
+msgstr "ldap_group_search_base (chaînes)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5853,8 +5884,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict group searches."
msgstr ""
-"Cette option définit un filtre de recherche LDAP supplémentaire qui "
-"restreint les recherches de groupe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2299
@@ -5862,8 +5891,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_group_search_base."
msgstr ""
-"Cette option est <emphasis>déconseillée</emphasis> en faveur de la syntaxe "
-"utilisée par ldap_group_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2309
@@ -5965,6 +5992,16 @@ msgstr "Module PAM pour SSSD"
#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: pam_sss.8.xml:24
+#, fuzzy
+#| msgid ""
+#| "<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</"
+#| "replaceable> </arg>"
msgid ""
"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
@@ -5978,6 +6015,8 @@ msgstr ""
"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</replaceable> </"
"arg>"
#. type: Content of: <reference><refentry><refsect1><para>
@@ -6141,6 +6180,19 @@ msgstr "sssd_krb5_locator_plugin"
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:22
+#, fuzzy
+#| msgid ""
+#| "The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> "
+#| "is used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+#| "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the "
+#| "Kerberos libraries what Realm and which KDC to use. Typically this is "
+#| "done in <citerefentry> <refentrytitle>krb5.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> which is always read by the "
+#| "Kerberos libraries. To simplify the configuration the Realm and the KDC "
+#| "can be defined in <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> as described in <citerefentry> "
+#| "<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+#| "citerefentry>"
msgid ""
"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
@@ -6611,9 +6663,6 @@ msgid ""
"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
"will be ignored."
msgstr ""
-"Si le filtre est donné dans l'une des bases de recherche et "
-"<emphasis>ipa_hbac_support_srchost</emphasis> a la valeur False, le filtre "
-"sera ignoré."
#. type: Content of: <listitem><para>
#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
@@ -6782,15 +6831,17 @@ msgstr "Par défaut : DENY_ALL"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:333
+#, fuzzy
+#| msgid "ipa_enable_dns_sites (boolean)"
msgid "ipa_hbac_support_srchost (boolean)"
-msgstr "ipa_hbac_support_srchost (booléen)"
+msgstr "ipa_enable_dns_sites (booléen)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:336
msgid ""
"If this is set to false, then srchost as given to SSSD by PAM will be "
"ignored."
-msgstr "Si false, srchost tel qu'il figure à SSSD par PAM sera ignoré."
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:340
@@ -6798,9 +6849,6 @@ msgid ""
"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
msgstr ""
-"Noter que si la valeur <emphasis>False</emphasis>, cette option implique que "
-"les filtres donnés en <emphasis>ipa_host_search_base</emphasis> seront "
-"ignorés ;"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:351
@@ -6819,271 +6867,370 @@ msgstr "Par défaut : Le lieu nommé « default »"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr "ipa_netgroup_member_of (chaîne)"
+msgstr "ldap_netgroup_member (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr "L'attribut LDAP qui répertorie les appartenances aux netgroups."
+msgstr ""
+"L'attribut LDAP énumérant les groupes auquel appartient un utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr "ipa_netgroup_member_user (chaîne)"
+msgstr "ldap_netgroup_member (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid ""
"The LDAP attribute that lists system users and groups that are direct "
"members of the netgroup."
msgstr ""
-"L'attribut LDAP qui répertorie les utilisateurs et les groupes qui sont "
-"membres directs du netgroup."
+"L'attribut LDAP énumérant les groupes auquel appartient un utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberUser"
-msgstr "Par défaut : memberUser"
+msgstr "Par défaut : memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr "ipa_netgroup_member_host (chaîne)"
+msgstr "ldap_netgroup_member (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists hosts and host groups that are direct members "
"of the netgroup."
-msgstr ""
-"L'attribut LDAP qui répertorie les systèmes et les groupes de systèmes qui "
-"sont membres directs du netgroup."
+msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberHost"
-msgstr "Par défaut : memberHost"
+msgstr "Par défaut : memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr "ipa_netgroup_member_ext_host (chaîne)"
+msgstr "ldap_netgroup_member (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists FQDNs of hosts and host groups that are "
"members of the netgroup."
-msgstr ""
-"L'attribut LDAP qui répertorie les noms de domaines complets des systèmes et "
-"des groupes de systèmes qui appartiennent au groupe réseau."
+msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr "Par défaut : externalHost"
+msgstr "Par défaut : root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr "ipa_netgroup_domain (chaîne)"
+msgstr "ipa_domain (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr "L'attribut LDAP qui contient le nom de domaine NIS du netgroup."
+msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr "Par défaut : nisDomainName"
+msgstr "Par défaut : aucun"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_host_object_class (string)"
-msgstr "ipa_host_object_class (chaîne)"
+msgstr "ldap_user_object_class (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
msgid "The object class of a host entry in LDAP."
-msgstr "La classe de l'objet d'une entrée d'hôte dans l'annuaire LDAP."
+msgstr "La classe d'objet d'une entrée utilisateur dans LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: ipaHost"
-msgstr "Par défaut : ipaHost"
+msgstr "Par défaut : host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr "ipa_host_fqdn (chaîne)"
+msgstr "ipa_hostname (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains FQDN of the host."
-msgstr "L'attribut LDAP qui contient le nom de domaine complet du système."
+msgstr "L'attribut LDAP contenant les noms des membres du groupe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr "Par défaut : nom de domaine complet"
+msgstr "Par défaut : cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ipa_selinux_usermap_object_class (string)"
+msgstr "ldap_user_object_class (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr "ipa_selinux_usermap_name (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr "L'attribut LDAP qui contient le nom de SELinux usermap."
+msgstr "L'attribut LDAP contenant les noms des membres du groupe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_selinux_usermap_member_user (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid ""
"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-"L'attribut LDAP qui contient tous les utilisateurs / groupes correspondant à "
-"cette règle."
+msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_selinux_usermap_member_host (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
msgid ""
"The LDAP attribute that contains all hosts / hostgroups this rule match "
"against."
msgstr ""
-"L'attribut LDAP qui contient tous les hôtes / hostgroups correspondant à "
-"cette règle."
+"L'attribut LDAP contenant les triplets (hôte, utilisateur, domaine) d'un "
+"netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_selinux_usermap_see_also (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that contains DN of HBAC rule which can be used for "
"matching instead of memberUser and memberHost"
-msgstr ""
-"L'attribut LDAP qui contient le DN de la règle de HBAC qui peut être utilisé "
-"pour la correspondance au lieu de memberUser et memberHost"
+msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: ou"
msgid "Default: seeAlso"
-msgstr "Par défaut : seeAlso"
+msgstr "Par défaut : ou"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_selinux_usermap_selinux_user (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr "L'attribut LDAP qui contient la chaîne utilisateur SELinux."
+msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: sudoUser"
msgid "Default: ipaSELinuxUser"
-msgstr "Par défaut : ipaSELinuxUser"
+msgstr "Par défaut : sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ipa_selinux_usermap_enabled (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid ""
"The LDAP attribute that contains whether or not is user map enabled for "
"usage."
msgstr ""
-"L'attribut LDAP qui contient le fait que la carte utilisateur est activée "
-"pour utilisation ou non."
+"L'attribut LDAP qui contient le chemin vers l'interpréteur de commandes de "
+"l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: loginDisabled"
msgid "Default: ipaEnabledFlag"
-msgstr "Par défaut : ipaEnabledFlag"
+msgstr "Par défaut : loginDisabled"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ipa_selinux_usermap_user_category (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr ""
-"L'attribut LDAP qui contient la catégorie utilisateur tels que « all »."
+msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: try"
msgid "Default: userCategory"
-msgstr "Par défaut : userCategory"
+msgstr "Par défaut : try"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ipa_selinux_usermap_host_category (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr "L'attribut LDAP qui contient la catégorie hôte tels que « all »."
+msgstr ""
+"L'attribut LDAP qui contient le chemin vers l'interpréteur de commandes de "
+"l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: hostCategory"
-msgstr "Par défaut : hostCategory"
+msgstr "Par défaut : host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ipa_selinux_usermap_uuid (string)"
+msgstr "ipa_selinux_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr "L'attribut LDAP qui contient l'ID unique de la carte de l'utilisateur."
+msgstr ""
+"L'attribut LDAP qui contient le nom du répertoire personnel de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr "Par défaut : ipaUniqueID"
+msgstr "Par défaut : nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ldap_user_ssh_public_key (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_host_ssh_public_key (string)"
+msgstr "ldap_user_ssh_public_key (chaîne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'hôte."
+msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr "Par défaut : ipaSshPubKey"
+msgstr "Par défaut : false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -7224,15 +7371,23 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:57
+#, fuzzy
+#| msgid ""
+#| "However, it is neither necessary nor recommended to set these options. "
+#| "IPA provider can also be used as an access and chpass provider. As an "
+#| "access provider it uses HBAC (host-based access control) rules. Please "
+#| "refer to freeipa.org for more information about HBAC. No configuration of "
+#| "access provider is required on the client side."
msgid ""
"However, it is neither necessary nor recommended to set these options. The "
"AD provider can also be used as an access and chpass provider. No "
"configuration of the access provider is required on the client side."
msgstr ""
-"Toutefois, il n'est ni nécessaire ni recommandé de définir ces options. Le "
-"fournisseur AD peut également être utilisé comme fournisseur d'accès et "
-"fournisseur chpass. Aucune configuration du fournisseur d'accès n'est "
-"requise côté client."
+"Toutefois, il n'est ni nécessaire ni recommandé de définir ces options. Le "
+"fournisseur IPA peut également servir comme fournisseur d'accès et chpass. "
+"En tant que fournisseur d'accès, il utilise des règles HBAC (host-based "
+"access control). Veuillez consulter freeipa.org pour plus d'informations sur "
+"HBAC. Aucune configuration de fournisseur d'accès n'est requise côté client."
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:69
@@ -7246,16 +7401,6 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:63
-#, fuzzy
-#| msgid ""
-#| "By default, the AD provider will map UID and GID values from the "
-#| "objectSID parameter in Active Directory. For details on this, see the "
-#| "<quote>ID MAPPING</quote> section below. If you want to disable ID "
-#| "mapping and instead rely on POSIX attributes defined in Active Directory, "
-#| "you should set <placeholder type=\"programlisting\" id=\"0\"/> Users, "
-#| "groups and other entities served by SSSD are always treated as case-"
-#| "insensitive in the AD provider for compatibility with Active Directory's "
-#| "LDAP implementation."
msgid ""
"By default, the AD provider will map UID and GID values from the objectSID "
"parameter in Active Directory. For details on this, see the <quote>ID "
@@ -7263,16 +7408,6 @@ msgid ""
"rely on POSIX attributes defined in Active Directory, you should set "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
-"Dans son comportement par défaut, le fournisseur AD associera les valeurs "
-"UID et GID à partir du paramètre objectSID dans Active Directory. Pour plus "
-"d'informations sur le sujet, voir la section <quote>CORRESPONDANCES "
-"D'IDENTIFIANTS</quote> ci-dessous. Si vous souhaitez désactiver la "
-"correspondance d'ID et vous appuyer plutôt sur les attributs POSIX définis "
-"dans Active Directory, il faut définir <placeholder type=\"programlisting\" "
-"id=\"0\"/> Les utilisateurs, les groupes et autres objets servis par SSSD "
-"sont toujours traités comme étant insensibles à la casse dans le fournisseur "
-"AD de manière à rester compatible avec la mise en œuvre de LDAP dans Active "
-"Directory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:83
@@ -7355,15 +7490,12 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:193
-#, fuzzy, no-wrap
-#| msgid ""
-#| "override_homedir = /home/%u\n"
-#| " "
+#, no-wrap
msgid ""
"fallback_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para>
@@ -7549,9 +7681,6 @@ msgid ""
"automatically enabled. The sudo search base is configured to use the compat "
"tree (ou=sudoers,$DC)."
msgstr ""
-"Lorsque SSSD est configuré pour utiliser le fournisseur IPA, le fournisseur "
-"sudo est ajouté automatiquement. La base de recherche de sudo est alors "
-"configurée pour utiliser la branche de compatibilité (ou=sudoers,$DC)."
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-sudo.5.xml:99
@@ -7901,17 +8030,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:193
-#, fuzzy
-#| msgid ""
-#| "If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-#| "debug messages will be sent to stderr."
msgid ""
"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
"applications will not use the fast in memory cache."
msgstr ""
-"Si la variable d'environnement SSSD_KRB5_LOCATOR_DEBUG a une valeur "
-"quelconque, des messages de débogage seront envoyés sur la sortie standard "
-"d'erreur."
#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
@@ -8378,14 +8500,6 @@ msgid ""
"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
"</citerefentry> for details) is created."
msgstr ""
-"Répertoire pour stocker les caches crédits. Toutes les séquences de "
-"substitution de krb5_ccname_template peuvent être utilisée ici, hormis %d et "
-"%P. Si le dossier n'existe pas, il sera créé. Si %u, %U, %p ou %h sont "
-"utilisés, un répertoire privé appartenant à l'utilisateur est créé. Sinon un "
-"répertoire public avec un drapeau de restriction à la suppression (aussi "
-"appelé « sticky bit », cf. <citerefentry> <refentrytitle>chmod</"
-"refentrytitle> <manvolnum>1</manvolnum> </citerefentry> pour plus de "
-"détails) est créé."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:152
@@ -8434,8 +8548,10 @@ msgstr "répertoire personnel"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:192
+#, fuzzy
+#| msgid "value of krb5_ccachedir"
msgid "value of krb5ccache_dir"
-msgstr "valeur de krb5ccache_dir"
+msgstr "valeur de krb5_ccachedir"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:197
@@ -8458,19 +8574,11 @@ msgid ""
"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
"used to create a unique filename in a safe way."
msgstr ""
-"Emplacement du cache d'informations d'identification de l'utilisateur. Deux "
-"types de cache sont actuellement pris en charge : <quote>FILE</quote> et "
-"<quote>DIR</quote>. Le cache peut soit être spécifié comme <replaceable>TYPE:"
-"RESIDUAL</replaceable>, ou comme chemin d'accès absolu, ce qui implique le "
-"type <quote>FILE</quote>. Dans le modèle, les séquences suivantes sont "
-"substituées : <placeholder type=\"variablelist\" id=\"0\"/>. Si le modèle se "
-"termine par « XXXXXX », mkstemp (3) est utilisé pour créer un nom de fichier "
-"unique en toute sécurité."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:212
msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr "Par défaut : FICHIER:%d/krb5cc_%U_XXXXXX"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:218
@@ -10185,10 +10293,6 @@ msgid ""
"default value as well as the lowest allowed value, 0xFFF0 is the most "
"verbose mode. This setting overrides the settings from config file."
msgstr ""
-"Un masque de bits qui indique quels niveaux de débogage seront visibles. 0 x "
-"0010 est la valeur par défaut ainsi que la plus basse autorisée, 0xFFF0 est "
-"le mode le plus détaillé. Ce paramètre prend le pas sur les paramètres du "
-"fichier de configuration."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:8
@@ -10197,77 +10301,128 @@ msgstr "Niveaux de débogage actuellement pris en charge :"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:11
+#, fuzzy
+#| msgid ""
+#| "<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: Fatal failures. "
+#| "Anything that would prevent SSSD from starting up or causes it to cease "
+#| "running."
msgid ""
"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
"SSSD from starting up or causes it to cease running."
msgstr ""
-"<emphasis>0x0010</emphasis> : défaillances fatales. Tout ce qui empêcherait "
-"SSSD de démarrer ou provoquerait son arrêt."
+"<emphasis>0</emphasis>, <emphasis>0x0010</emphasis> : défaillances fatales. "
+"Tout ce qui empêcherait SSSD de démarrer ou provoquerait son arrêt."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:15
+#, fuzzy
+#| msgid ""
+#| "<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: Critical failures. "
+#| "An error that doesn't kill the SSSD, but one that indicates that at least "
+#| "one major feature is not going to work properly."
msgid ""
"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
"the SSSD, but one that indicates that at least one major feature is not "
"going to work properly."
msgstr ""
-"<emphasis>0x0020</emphasis> : échecs critiques. Une erreur qui ne tue pas "
-"SSSD, mais qui indique qu'au moins une caractéristique majeure ne pourra pas "
-"fonctionner correctement."
+"<emphasis>1</emphasis>, <emphasis>0x0020</emphasis> : échecs critiques. Une "
+"erreur qui ne tue pas SSSD, mais qui indique qu'au moins une caractéristique "
+"majeure ne pourra pas fonctionner correctement."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:20
+#, fuzzy
+#| msgid ""
+#| "<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: Serious failures. An "
+#| "error announcing that a particular request or operation has failed."
msgid ""
"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
"particular request or operation has failed."
msgstr ""
-"<emphasis>0x0040</emphasis> : défaillances graves. Une erreur qui annonce "
-"qu'une requête particulière ou une opération a échoué."
+"<emphasis>2</emphasis>, <emphasis>0x0040</emphasis> : défaillances graves. "
+"Une erreur qui annonce qu'une requête particulière ou une opération a échoué."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:24
+#, fuzzy
+#| msgid ""
+#| "<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: Minor failures. "
+#| "These are the errors that would percolate down to cause the operation "
+#| "failure of 2."
msgid ""
"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
"percolate down to cause the operation failure of 2."
msgstr ""
-"<emphasis>0x0080</emphasis> : erreurs mineures. Ce sont les erreurs qui "
-"seraient susceptibles d'empirer pour provoquer l'erreur en 2."
+"<emphasis>3</emphasis>, <emphasis>0x0080</emphasis> : erreurs mineures. Ce "
+"sont les erreurs qui seraient susceptibles d'empirer pour provoquer l'erreur "
+"en 2."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid ""
+#| "<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: Configuration "
+#| "settings."
msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>0x0100</emphasis> : paramètres de configuration."
+msgstr ""
+"<emphasis>4</emphasis>, <emphasis>0x0100</emphasis> : paramètres de "
+"configuration."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: Function data."
msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>0x0200</emphasis> : données de fonctionnement."
+msgstr ""
+"<emphasis>5</emphasis>, <emphasis>0x0200</emphasis> : données de "
+"fonctionnement."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid ""
+#| "<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: Trace messages for "
+#| "operation functions."
msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr "<emphasis>0x0400</emphasis> : traçage des fonctions opérationnelles."
+msgstr ""
+"<emphasis>6</emphasis>, <emphasis>0x0400</emphasis> : traçage des fonctions "
+"opérationnelles."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid ""
+#| "<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: Trace messages for "
+#| "internal control functions."
msgid ""
"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
msgstr ""
-"<emphasis>0x1000</emphasis> : traçage des fonctions de contrôles internes."
+"<emphasis>7</emphasis>, <emphasis>0x1000</emphasis> : traçage des fonctions "
+"de contrôles internes."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
+#, fuzzy
+#| msgid ""
+#| "<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: Contents of function-"
+#| "internal variables that may be interesting."
msgid ""
"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
"may be interesting."
msgstr ""
-"<emphasis>0x2000</emphasis> : contenu des variables internes de fonctions "
-"pouvent être intéressantes."
+"<emphasis>8</emphasis>, <emphasis>0x2000</emphasis> : contenu des variables "
+"internes de fonctions pouvent être intéressantes."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid ""
+#| "<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: Extremely low-level "
+#| "tracing information."
msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr "<emphasis>0x4000</emphasis> : informations de traçage de bas niveau."
+msgstr ""
+"<emphasis>9</emphasis>, <emphasis>0x4000</emphasis> : informations de "
+"traçage de bas niveau."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:46
@@ -10275,8 +10430,6 @@ msgid ""
"To log required debug levels, simply add their numbers together as shown in "
"following examples:"
msgstr ""
-"Pour activer les niveaux de débogage requis, il suffit de faire la somme de "
-"l'ensemble des numéros tel qu'illustré dans les exemples suivants :"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:49
@@ -10299,13 +10452,16 @@ msgstr ""
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:57
+#, fuzzy
+#| msgid ""
+#| "<emphasis>Note</emphasis>: The bitmask format of debug levels was "
+#| "introduced in 1.7.0."
msgid ""
"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
msgstr ""
-"<emphasis>Note</emphasis> : il s'agit d'un nouveau format des niveaux de "
-"débogage introduit dans la version 1.7.0. L'ancien format (nombres de 0 à "
-"10) est compatible mais déconseillé et voué à disparaître."
+"<emphasis>Note</emphasis> : le format des niveaux de débogage a été "
+"introduit dans la version 1.7.0."
#. type: Content of: outside any tag (error?)
#: include/experimental.xml:1
@@ -10393,6 +10549,8 @@ msgstr "VOIR AUSSI"
#| "<citerefentry> <refentrytitle>sss_ssh_authorizedkeys</refentrytitle> "
#| "<manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
#| "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+#| "manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+#| "<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
#| "manvolnum> </citerefentry>, </phrase> <citerefentry> "
#| "<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
#| "citerefentry>."
@@ -10468,6 +10626,8 @@ msgstr ""
"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
"manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+"<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
@@ -10497,14 +10657,17 @@ msgstr "syntaxe : <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:13
#: include/ldap_search_bases_experimental.xml:13
+#, fuzzy
+#| msgid ""
+#| "The filter must be a valid LDAP search filter as specified by http://www."
+#| "ietf.org/rfc/rfc2254.txt"
msgid ""
"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
"rfc2254.txt"
msgstr ""
-"La portée peut être « base », un « onelevel » ou « subtree ». Le filtre doit "
-"être un filtre de recherche LDAP valide tel que spécifié par http://www.ietf."
-"org/rfc/rfc2254.txt"
+"Le filtre doit être un filtre de recherche LDAP valide tel que spécifié par "
+"http://www.ietf.org/rfc/rfc2254.txt"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:19
@@ -10541,6 +10704,21 @@ msgstr ""
"devrez généralement redémarrer le démon automounter après le redémarrage de "
"SSSD"
+#~ msgid "GENERAL OPTIONS"
+#~ msgstr "OPTIONS GÉNÉRALES"
+
+#~ msgid ""
+#~ "Following options are usable in more than one configuration sections."
+#~ msgstr ""
+#~ "Les options qui suivent peuvent être utilisées dans plus d'une section de "
+#~ "configuration."
+
+#~ msgid "Options usable in all sections"
+#~ msgstr "Options utilisables dans toutes les sections"
+
+#~ msgid "Options usable in SERVICE and DOMAIN sections"
+#~ msgstr "Options utilisables dans les sections SERVICE et DOMAIN"
+
#~ msgid "%1$s"
#~ msgstr "%1$s"
@@ -10572,6 +10750,126 @@ msgstr ""
#~ "Les expansions suivantes sont prises en charge : <placeholder type="
#~ "\"variablelist\" id=\"0\"/>"
+#~ msgid "offline_timeout (integer)"
+#~ msgstr "offline_timeout (entier)"
+
+#~ msgid ""
+#~ "If SSSD is in offline mode, and last attempt to go online was less than "
+#~ "number of seconds specified in this option ago, new requests for data "
+#~ "will not result in attempt to go online."
+#~ msgstr ""
+#~ "Si SSSD est en mode hors-ligne, et que la dernière tentative de passage "
+#~ "en mode en ligne date de moins que le nombre de secondes indiqué dans "
+#~ "cette option, les nouvelles demandes de données n'entraineront pas de "
+#~ "tentative de mise en ligne."
+
+#~ msgid ""
+#~ "The default shell to use if the provider does not return one during "
+#~ "lookup. This option can be specified globally in the [nss] section or per-"
+#~ "domain."
+#~ msgstr ""
+#~ "L'interpréteur de commande par défaut à utiliser si le fournisseur n'en "
+#~ "renvoie pas un lors de la recherche. Cette option peut être indiquée au "
+#~ "choix soit dans la section [nss], soit par domaine."
+
+#~ msgid ""
+#~ "These options can be used to configure the sudo service. The detailed "
+#~ "instructions for configuration of <citerefentry> <refentrytitle>sudo</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to work with "
+#~ "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> are in the manual page <citerefentry> "
+#~ "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry>."
+#~ msgstr ""
+#~ "Ces options peuvent être utilisées pour configurer le service sudo. Les "
+#~ "directives de configuration de <citerefentry> <refentrytitle>sudo</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> dans "
+#~ "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> sont détaillées dans la page de manuel "
+#~ "<citerefentry> <refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry>."
+
+#~ msgid "subdomain_enumerate (string)"
+#~ msgstr "subdomain_enumerate (chaîne)"
+
+#~ msgid "all"
+#~ msgstr "all"
+
+#~ msgid "All discovered trusted domains will be enumerated"
+#~ msgstr "Tous les domaines approuvés découverts seront énumérés"
+
+#~ msgid "none"
+#~ msgstr "none"
+
+#~ msgid "No discovered trusted domains will be enumerated"
+#~ msgstr "Aucun domaine approuvé découvert ne sera énuméré"
+
+#~ msgid ""
+#~ "Whether any of autodetected trusted domains should be enumerated. The "
+#~ "supported values are: <placeholder type=\"variablelist\" id=\"0\"/> "
+#~ "Optionally, a list of one or more domain names can enable enumeration "
+#~ "just for these trusted domains."
+#~ msgstr ""
+#~ "Les domaines approuvés auto-détectés doivent-ils être énumérés ?\n"
+#~ "Les valeurs prises en charge sont : <placeholder type=\"variablelist\" id="
+#~ "\"0\"/> \n"
+#~ "De manière facultative, une liste d'un ou plusieurs noms de domaines peut "
+#~ "activer l'énumération pour ces seuls domaines."
+
+#~ msgid ""
+#~ "The cache expiration timestamps are stored as attributes of individual "
+#~ "objects in the cache. Therefore, changing the cache timeout only has "
+#~ "effect for newly added or expired entries. You should run the "
+#~ "<citerefentry> <refentrytitle>sss_cache</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> tool in order to force refresh of entries that "
+#~ "have already been cached."
+#~ msgstr ""
+#~ "Les horodatages d'expiration de cache sont stockés en tant qu'attributs "
+#~ "des objets individuels dans le cache. Il en découle que la modification "
+#~ "du délai d'expiration du cache ne sera pris en compte que pour les "
+#~ "entrées qui y sont nouvellement ajoutées, ou pour celles qui ont expiré. "
+#~ "Vous devriez utiliser l'outil <citerefentry> <refentrytitle>sss_cache</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> de manière à "
+#~ "forcer un rafraîchissement des entrées qui sont déjà en cache."
+
+#~ msgid ""
+#~ "Specifies how many seconds SSSD has to wait before triggering a "
+#~ "background refresh task which will refresh all expired or nearly expired "
+#~ "records."
+#~ msgstr ""
+#~ "Indique la durée en secondes pendant laquelle SSSD doit attendre avant de "
+#~ "déclencher une tâche en arrière-plan qui rafraichira tous les "
+#~ "enregistrements expirés ou sur le point de l'être."
+
+#~ msgid "Currently only refreshing expired netgroups is supported."
+#~ msgstr ""
+#~ "Actuellement, seul le rafraichissement des netgroups expirés est pris en "
+#~ "charge."
+
+#~ msgid ""
+#~ "NOTE: This option has no effect on netgroup lookups due to their tendency "
+#~ "to include nested netgroups without qualified names. For netgroups, all "
+#~ "domains will be searched when an unqualified name is requested."
+#~ msgstr ""
+#~ "NOTE : Cette option n'a pas d'effet sur les recherches de netgroups, du "
+#~ "fait de leur tendance à inclure des groupes imbriqués sans noms "
+#~ "qualifiés. Pour les netgroups, la recherche se fera dans tous les "
+#~ "domaines lorsqu'un nom non qualifié sera demandé."
+
+#~ msgid ""
+#~ "<quote>ipa</quote> the same as <quote>ldap</quote> but with IPA default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ipa</quote> identiqué à <quote>ldap</quote> mais avec les "
+#~ "paramètres par défaut pour IPA."
+
+#~ msgid ""
+#~ "<quote>ad</quote> the same as <quote>ldap</quote> but with AD default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ipa</quote> identiqué à <quote>ldap</quote> mais avec les "
+#~ "paramètres par défaut pour AD."
+
#~ msgid ""
#~ "Regular expression for this domain that describes how to parse the string "
#~ "containing user name and domain into these components. The \"domain\" "
@@ -10601,6 +10899,64 @@ msgstr ""
#~ "Étiquettes diverses stockées par le service de configuration de realmd "
#~ "pour ce domaine."
+#~ msgid "SSSD LDAP provider"
+#~ msgstr "Fournisseur LDAP SSSD"
+
+#~ msgid "ldap_user_extra_attrs (string)"
+#~ msgstr "ldap_user_extra_attrs (chaîne)"
+
+#~ msgid ""
+#~ "Comma-separated list of LDAP attributes that SSSD would fetch along with "
+#~ "the usual set of user attributes."
+#~ msgstr ""
+#~ "Liste séparée par des virgules des attributs LDAP que SSSD va demander en "
+#~ "plus des attributs utilisateur habituels."
+
+#~ msgid ""
+#~ "The list can either contain LDAP attribute names only, or colon-separated "
+#~ "tuples of SSSD cache attribute name and LDAP attribute name. In case only "
+#~ "LDAP attribute name is specified, the attribute is saved to the cache "
+#~ "verbatim. Using a custom SSSD attribute name might be required by "
+#~ "environments that configure several SSSD domains with different LDAP "
+#~ "schemas."
+#~ msgstr ""
+#~ "La liste ne peut contenir que des noms d'attributs LDAP, ou des tuples "
+#~ "séparés par des virgules de nom d'attribut de cache et nom d'attribut "
+#~ "LDAP. Dans le cas où seul le nom d'un attribut LDAP est indiqué, "
+#~ "l'attribut est enregistré tel quel dans le cache. L'utilisation d'un nom "
+#~ "d'attribut SSSD peut être nécessaire pour les environnements configurant "
+#~ "plusieurs domaines SSSD utilisant des schémas LDAP différents."
+
+#~ msgid ""
+#~ "Please note that several attribute names are reserved by SSSD, notably "
+#~ "the <quote>name</quote> attribute. SSSD would report an error if any of "
+#~ "the reserved attribute names is used as an extra attribute name."
+#~ msgstr ""
+#~ "Veuillez noter que plusieurs noms d'attributs sont réservés par SSSD, "
+#~ "dont l'attribut <quote>name</quote>. SSSD émettrait une erreur si l'un "
+#~ "des noms d'attributs réservés est utilisé par un nom d'attribut "
+#~ "supplémentaire."
+
+#~ msgid "ldap_user_extra_attrs = telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>telephoneNumber</quote> to the cache."
+#~ msgstr ""
+#~ "Enregistrer l'attribut LDAP <quote>telephoneNumber</quote> en tant que "
+#~ "<quote>telephoneNumber</quote> dans le cache."
+
+#~ msgid "ldap_user_extra_attrs = phone:telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = phone:telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>phone</quote> to the cache."
+#~ msgstr ""
+#~ "Enregistrer l'attribut LDAP <quote>telephoneNumber</quote> en tant que "
+#~ "<quote>phone</quote> dans le cache."
+
#~ msgid ""
#~ "Please note that the ldap_access_order configuration option "
#~ "<emphasis>must</emphasis> include <quote>authorized_service</quote> in "
@@ -10619,6 +10975,42 @@ msgstr ""
#~ "emphasis> inclure <quote>host</quote> de façon à permettre à l'option "
#~ "ldap_user_authorized_host de fonctionner."
+#~ msgid "ldap_group_type (integer)"
+#~ msgstr "ldap_group_type (entier)"
+
+#~ msgid ""
+#~ "The LDAP attribute that contains an integer value indicating the type of "
+#~ "the group and maybe other flags."
+#~ msgstr ""
+#~ "L'attribut LDAP qui contient une valeur entière indiquant le type de "
+#~ "groupe voire d'autres indicateurs."
+
+#~ msgid ""
+#~ "This attribute is currently only used by the AD provider to determine if "
+#~ "a group is a domain local groups and has to be filtered out for trusted "
+#~ "domains."
+#~ msgstr ""
+#~ "Cet attribut est actuellement utilisé uniquement par le fournisseur AD "
+#~ "pour déterminer si un groupe est un groupe de domaine local et doit être "
+#~ "filtré hors des domaines approuvés."
+
+#~ msgid "Default: groupType in the AD provider, othewise not set"
+#~ msgstr ""
+#~ "Par défaut : groupType dans le fournisseur AD, non configuré pour les "
+#~ "autres"
+
+#~ msgid "ldap_use_tokengroups"
+#~ msgstr "ldap_use_tokengroups"
+
+#~ msgid ""
+#~ "This options enables or disables use of Token-Groups attribute when "
+#~ "performing initgroup for users from Active Directory Server 2008 and "
+#~ "later."
+#~ msgstr ""
+#~ "Cette option active ou désactive l'utilisation de l'attribut Token-Groups "
+#~ "lors de l'initialisation des groupes pour les utilisateurs Active "
+#~ "Directory 2008 et versions ultérieures."
+
#~ msgid "ldap_min_id, ldap_max_id (interger)"
#~ msgstr "ldap_min_id, ldap_max_id (entiers)"
@@ -10671,6 +11063,14 @@ msgstr ""
#~ "localisation."
#~ msgid ""
+#~ "<emphasis>Note</emphasis>: if a password policy is configured on server "
+#~ "side, it always takes precedence over policy set with this option."
+#~ msgstr ""
+#~ "<emphasis>Note</emphasis> : si une politique de mots de passe est "
+#~ "configurée côté serveur, elle prend le pas sur la politique indiquée avec "
+#~ "cette option."
+
+#~ msgid ""
#~ "Please note that the ldap_access_order configuration option "
#~ "<emphasis>must</emphasis> include <quote>expire</quote> in order for the "
#~ "ldap_account_expire_policy option to work."
@@ -10679,6 +11079,27 @@ msgstr ""
#~ "emphasis> inclure <quote>expire</quote> de façon à permettre à l'option "
#~ "ldap_account_expire_policy de fonctionner."
+#~ msgid "ldap_autofs_map_master_name (string)"
+#~ msgstr "ldap_autofs_map_master_name (chaîne)"
+
+#~ msgid "The name of the automount master map in LDAP."
+#~ msgstr "Le nom de la table de montage automatique maîtresse dans LDAP."
+
+#~ msgid "Default: auto.master"
+#~ msgstr "Par défaut : auto.master"
+
+#~ msgid "<option>ignore_unknown_user</option>"
+#~ msgstr "<option>ignore_unknown_user</option>"
+
+#~ msgid "<option>ignore_authinfo_unavail</option>"
+#~ msgstr "<option>ignore_authinfo_unavail</option>"
+
+#~ msgid "Kerberos locator plugin"
+#~ msgstr "Greffon de localisation Kerberos"
+
+#~ msgid "SSSD IPA provider"
+#~ msgstr "Fournisseur IPA SSSD"
+
#~ msgid ""
#~ "Optional. This option tells SSSD to automatically update the DNS server "
#~ "built into FreeIPA v2 with the IP address of this client. The update is "
@@ -10737,9 +11158,6 @@ msgstr ""
#~ "maintenant utiliser <emphasis>dyndns_iface</emphasis> dans leur fichier "
#~ "de configuration."
-#~ msgid "ipa_enable_dns_sites (boolean)"
-#~ msgstr "ipa_enable_dns_sites (booléen)"
-
#~ msgid "Enables DNS sites - location based service discovery."
#~ msgstr ""
#~ "Active les sites DNS - découverte de service basée sur l'emplacement"
@@ -10811,6 +11229,9 @@ msgstr ""
#~ msgid "Default: False (let nsupdate choose the protocol)"
#~ msgstr "Par défaut : False (laisser nsupdate choisir le protocole)"
+#~ msgid "<emphasis>never</emphasis> use FAST."
+#~ msgstr "<emphasis>never</emphasis> : ne jamais utiliser FAST."
+
#~ msgid "ipa_hbac_selinux (integer)"
#~ msgstr "ipa_hbac_selinux (entier)"
@@ -10826,11 +11247,6 @@ msgstr ""
#~ msgid "ipa_server_mode (boolean)"
#~ msgstr "ipa_server_mode (booléen)"
-#~ msgid "This options should only be set by the IPA installer."
-#~ msgstr ""
-#~ "Cette option ne doit être utilisée que par le programme d'installation "
-#~ "IPA."
-
#~ msgid ""
#~ "The option denotes that the SSSD is running on IPA server and should "
#~ "perform lookups of users and groups from trusted domains differently."
@@ -10839,6 +11255,9 @@ msgstr ""
#~ "effectuer différemment ses recherches d'utilisateurs et groupes depuis "
#~ "les domaines approuvés."
+#~ msgid "SSSD Active Directory provider"
+#~ msgstr "Fournisseur Active Directory SSSD"
+
#~ msgid ""
#~ "The short domain name (also known as the NetBIOS or the flat name) is "
#~ "autodetected by the SSSD."
@@ -10880,6 +11299,45 @@ msgstr ""
#~ "trouvé. La configuration SRV du DNS, incluant la découverte de domaine, "
#~ "est aussi utilisée pendant la découverte de site."
+#~ msgid "ad_access_filter (string)"
+#~ msgstr "ad_access_filter (chaîne)"
+
+#~ msgid ""
+#~ "# apply filter on domain called dom1 only:\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on domain called dom2 only:\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on forest called EXAMPLE.COM only:\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+#~ msgstr ""
+#~ "# applique le filtre sur le seul domaine dom1 :\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# applique le filtre sur le seul domaine dom2 :\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# applique le filtre sur la seule forêt nommée EXAMPLE.COM :\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+
+#~ msgid "Default: Not set"
+#~ msgstr "Par défaut : non défini"
+
+#~ msgid "ad_enable_gc (boolean)"
+#~ msgstr "ad_enable_gc (booléen)"
+
+#~ msgid "ad_gpo_access_control (string)"
+#~ msgstr "ad_gpo_access_control (chaîne)"
+
+#~ msgid "There are three supported values for this option:"
+#~ msgstr "Il existe trois valeurs prises en charge pour cette option :"
+
+#~ msgid "Default: permissive"
+#~ msgstr "Par défaut : permissive"
+
#~ msgid ""
#~ "Optional. This option tells SSSD to automatically update the Active "
#~ "Directory DNS server with the IP address of this client. The update is "
@@ -10930,8 +11388,39 @@ msgstr ""
#~ "Les fichiers spéciaux (périphériques blocs, caractères, tubes nommés et "
#~ "sockets unix) ne seront pas copiés."
-#~ msgid "Default: false (AD provide: true)"
-#~ msgstr "Par défaut : false (AD provide: true)"
+#~ msgid "SSSD Kerberos provider"
+#~ msgstr "Fournisseur Kerberos SSSD"
+
+#~ msgid "Default: (from libkrb5)"
+#~ msgstr "Par défaut : (valeur provenant de libkrb5)"
+
+#~ msgid "Default: false (AD provider: true)"
+#~ msgstr "Par défaut : false (AD provider : true)"
+
+#~ msgid "<option>--addattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr "<option>--addattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Ajouter une paire attribut/valeur. Le format est nom_attribut=valeur."
+
+#~ msgid "<option>--setattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr "<option>--setattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Définir une paire attribut/valeur. Le format est nom_attribut=valeur. "
+#~ "Pour les attributs multi-valués, la commande remplace les valeurs déjà "
+#~ "présentes."
+
+#~ msgid "<option>--delattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr "<option>--delattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr ""
+#~ "Supprimer une paire attribut/valeur. Le format est nom_attribut=valeur."
#~ msgid "<option>-E</option>,<option>--everything</option>"
#~ msgstr "<option>-E</option>,<option>--everything</option>"
@@ -10939,6 +11428,58 @@ msgstr ""
#~ msgid "Invalidate all cached entries except for sudo rules."
#~ msgstr "Invalider toutes les entrées en cache hors règles sudo."
+#~ msgid "sssd-ifp"
+#~ msgstr "sssd-ifp"
+
+#~ msgid "user_attributes (string)"
+#~ msgstr "user_attributes (chaîne)"
+
+#~ msgid "name"
+#~ msgstr "name"
+
+#~ msgid "user's login name"
+#~ msgstr "identifiant de connexion de l'utilisateur"
+
+#~ msgid "uidNumber"
+#~ msgstr "uidNumber"
+
+#~ msgid "user ID"
+#~ msgstr "identifiant de l'utilisateur"
+
+#~ msgid "gidNumber"
+#~ msgstr "gidNumber"
+
+#~ msgid "primary group ID"
+#~ msgstr "identifiant de groupe primaire"
+
+#~ msgid "gecos"
+#~ msgstr "gecos"
+
+#~ msgid "user information, typically full name"
+#~ msgstr "informations utilisateur, généralement le nom complet"
+
+#~ msgid "homeDirectory"
+#~ msgstr "homeDirectory"
+
+#~ msgid "loginShell"
+#~ msgstr "loginShell"
+
+#~ msgid "user shell"
+#~ msgstr "interpréteur de commande"
+
+#~ msgid ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+#~ msgstr ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+
+#~ msgid ""
+#~ "Default: not set. Only the default set of POSIX attributes is allowed."
+#~ msgstr ""
+#~ "Par défaut : non défini. Seul le jeu d'attributs POSIX par défaut est "
+#~ "autorisé."
+
#~ msgid "EXIT STATUS"
#~ msgstr "CODE RETOUR"
@@ -10949,9 +11490,51 @@ msgstr ""
#~ "Dans le cas d'un opération achevée avec succès, une valeur de retour de 0 "
#~ "est renvoyée. Dans le cas contraire, 1 est renvoyé."
+#~ msgid "Stopping the SSSD service"
+#~ msgstr "Arrêter le service SSSD"
+
+#~ msgid "Removing the database"
+#~ msgstr "Supprimer la base de donnée"
+
+#~ msgid "Starting the SSSD service"
+#~ msgstr "Démarrer le service SSSD"
+
+#~ msgid "Well-Known SIDs"
+#~ msgstr "SID bien connus"
+
+#~ msgid "Null Authority"
+#~ msgstr "Null Authority"
+
+#~ msgid "World Authority"
+#~ msgstr "World Authority"
+
+#~ msgid "Local Authority"
+#~ msgstr "Local Authority"
+
+#~ msgid "Creator Authority"
+#~ msgstr "Creator Authority"
+
+#~ msgid "NT Authority"
+#~ msgstr "NT Authority"
+
+#~ msgid "Built-in"
+#~ msgstr "Built-in"
+
+#~ msgid "<emphasis>Default</emphasis>: 0"
+#~ msgstr "<emphasis>Par défaut</emphasis> : 0"
+
+#~ msgid "%H"
+#~ msgstr "%H"
+
#~ msgid ""
#~ "override_homedir = /home/%u\n"
#~ " "
#~ msgstr ""
#~ "override_homedir = /home/%u\n"
#~ " "
+
+#~ msgid "homedir_substring (string)"
+#~ msgstr "homedir_substring (chaîne)"
+
+#~ msgid "Default: /home"
+#~ msgstr "Par défaut : /home"
diff --git a/src/man/po/ja.po b/src/man/po/ja.po
index bc28ad256..c094d3294 100644
--- a/src/man/po/ja.po
+++ b/src/man/po/ja.po
@@ -3,17 +3,17 @@
# This file is distributed under the same license as the sssd-docs package.
#
# Translators:
-# Tadashi "ELF" Jokagi <elf@poyo.jp>, 2012
+# Tadashi Jokagi <elf@poyo.jp>, 2012
# Tomoyuki KATO <tomo@dream.daynight.jp>, 2012-2013
-# 高一人参 @欠陥遺伝子 <www.carrotsoft@gmail.com>, 2012
+# carrotsoft <www.carrotsoft@gmail.com>, 2012
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-09-10 08:30+0000\n"
-"Last-Translator: Tomoyuki KATO <tomo@dream.daynight.jp>\n"
-"Language-Team: Japanese (http://www.transifex.com/projects/p/fedora/language/"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
+"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
+"Language-Team: Japanese (http://www.transifex.com/projects/p/sssd/language/"
"ja/)\n"
"Language: ja\n"
"MIME-Version: 1.0\n"
@@ -268,10 +268,6 @@ msgid ""
"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
"phrase>"
msgstr ""
-"サポートされるサービス: nss, pam <phrase condition=\"with_sudo\">, sudo</"
-"phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
-"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
-"\">, pac</phrase>"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
@@ -854,12 +850,15 @@ msgstr "このオプションはドメインごとに設定できます。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "fallback_homedir = /home/%u\n"
+#| " "
msgid ""
"override_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
@@ -910,8 +909,6 @@ msgid ""
"Override the login shell for all users. This option can be specified "
"globally in the [nss] section or per-domain."
msgstr ""
-"すべてのユーザーに対するログインシェルを上書きします。このオプションは [nss] "
-"において全体的またはドメインごとに指定できます。"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:532
@@ -1246,8 +1243,10 @@ msgstr "SUDO 設定オプション"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure the autofs service."
msgid "These options can be used to configure the sudo service."
-msgstr "これらのオプションは sudo サービスを設定するために使用されます。"
+msgstr "これらのオプションが autofs サービスを設定するために使用されます。"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -1621,10 +1620,15 @@ msgstr "refresh_expired_interval (整数)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1110
+#, fuzzy
+#| msgid ""
+#| "Specifies how many seconds SSSD has to wait before refreshing its cache "
+#| "of enumerated records."
msgid ""
"Specifies how many seconds SSSD has to wait before refreshing expired "
"records. Currently only refreshing expired netgroups is supported."
msgstr ""
+"SSSD が列挙レコードのキャッシュを更新する前に待つ必要がある秒数を指定します。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1115
@@ -4646,9 +4650,6 @@ msgid ""
"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
" "
msgstr ""
-"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1699
@@ -4656,8 +4657,6 @@ msgid ""
"This example means that access to this host is restricted to members of the "
"\"allowedusers\" group in ldap."
msgstr ""
-"この例は、このホストへのアクセスが LDAP にある \"allowedusers\" グループのメ"
-"ンバーに制限されることを意味します。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1704
@@ -5318,10 +5317,6 @@ msgid ""
"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
"\"variablelist\" id=\"4\"/>"
msgstr ""
-"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
-"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
-"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2243
@@ -5345,8 +5340,10 @@ msgstr "ldap_group_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr "ldap_user_search_filter (文字列)"
+msgstr "ldap_user_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -5354,8 +5351,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict user searches."
msgstr ""
-"このオプションは、ユーザー検索を制限する、追加の LDAP 検索フィルター基準を指"
-"定します。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2272
@@ -5363,8 +5358,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_user_search_base."
msgstr ""
-"このオプションは ldap_user_search_base により使用される構文のほうを選んで"
-"<emphasis>廃止されます</emphasis>。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:2282
@@ -5373,8 +5366,6 @@ msgid ""
" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
" "
msgstr ""
-" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2285
@@ -5382,13 +5373,13 @@ msgid ""
"This filter would restrict user searches to users that have their shell set "
"to /bin/tcsh."
msgstr ""
-"このフィルターは、ユーザー検索をシェルが /bin/tcsh に設定されているユーザーに"
-"制限されます。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr "ldap_group_search_filter (文字列)"
+msgstr "ldap_group_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5396,8 +5387,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict group searches."
msgstr ""
-"このオプションは、グループ検索を制限する、追加の LDAP 検索フィルター基準を指"
-"定します。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2299
@@ -5405,8 +5394,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_group_search_base."
msgstr ""
-"このオプションは ldap_group_search_base により使用される構文のほうを選んで"
-"<emphasis>廃止されます</emphasis>。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2309
@@ -5507,6 +5494,12 @@ msgstr "SSSD の PAM モジュール"
#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: pam_sss.8.xml:24
+#, fuzzy
+#| msgid ""
+#| "<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+#| "replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+#| "replaceable></arg> <arg choice='plain'>-n <replaceable>USER</"
+#| "replaceable></arg>"
msgid ""
"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
@@ -5515,11 +5508,9 @@ msgid ""
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
"arg>"
msgstr ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
"arg>"
#. type: Content of: <reference><refentry><refsect1><para>
@@ -6098,9 +6089,6 @@ msgid ""
"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
"will be ignored."
msgstr ""
-"フィルターがすべての検索ベースに与えられ、かつ "
-"<emphasis>ipa_hbac_support_srchost</emphasis> が偽(False)に設定されている"
-"と、フィルターは無視されます。"
#. type: Content of: <listitem><para>
#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
@@ -6265,8 +6253,10 @@ msgstr "初期値: DENY_ALL"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:333
+#, fuzzy
+#| msgid "ipa_enable_dns_sites (boolean)"
msgid "ipa_hbac_support_srchost (boolean)"
-msgstr "ipa_hbac_support_srchost (論理値)"
+msgstr "ipa_enable_dns_sites (論理値)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:336
@@ -6274,8 +6264,6 @@ msgid ""
"If this is set to false, then srchost as given to SSSD by PAM will be "
"ignored."
msgstr ""
-"これが偽に設定されていると、PAM により SSSD に与えられる srchost が無視されま"
-"す。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:340
@@ -6283,9 +6271,6 @@ msgid ""
"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
msgstr ""
-"<emphasis>False</emphasis> に設定されていると、このオプションは "
-"<emphasis>ipa_host_search_base</emphasis> に与えられたフィルターが無視される"
-"ようになることに注意してください。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:351
@@ -6304,265 +6289,363 @@ msgstr "初期値: \"default\" という名前の場所"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr "ipa_netgroup_member_of (文字列)"
+msgstr "ldap_netgroup_member (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr "ネットワークグループのメンバーを一覧にする LDAP 属性です。"
+msgstr "ユーザーのグループメンバーを一覧にする LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr "ipa_netgroup_member_user (文字列)"
+msgstr "ldap_netgroup_member (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid ""
"The LDAP attribute that lists system users and groups that are direct "
"members of the netgroup."
-msgstr ""
-"ネットワークグループの直接メンバーであるシステムユーザーとグループを一覧化す"
-"る LDAP 属性です。"
+msgstr "ユーザーのグループメンバーを一覧にする LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberUser"
-msgstr "初期値: memberUser"
+msgstr "初期値: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr "ipa_netgroup_member_host (文字列)"
+msgstr "ldap_netgroup_member (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists hosts and host groups that are direct members "
"of the netgroup."
-msgstr ""
-"ネットワークグループの直接メンバーであるホストとホストグループを一覧化する "
-"LDAP 属性です。"
+msgstr "ネットワークグループのメンバーの名前を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberHost"
-msgstr "初期値: memberHost"
+msgstr "初期値: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr "ipa_netgroup_member_ext_host (文字列)"
+msgstr "ldap_netgroup_member (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists FQDNs of hosts and host groups that are "
"members of the netgroup."
-msgstr ""
-"ネットワークグループのメンバーであるホストとホストグループの FQDN を一覧化す"
-"る LDAP 属性です。"
+msgstr "ネットワークグループのメンバーの名前を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr "初期値: externalHost"
+msgstr "初期値: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr "ipa_netgroup_domain (文字列)"
+msgstr "ipa_domain (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid "The LDAP attribute that contains NIS domain name of the netgroup."
-msgstr "ネットワークグループの NIS ドメイン名を含む LDAP 属性です。"
+msgstr "ネットワークグループのメンバーの名前を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr "初期値: nisDomainName"
+msgstr "初期値: none"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_host_object_class (string)"
-msgstr "ipa_host_object_class (文字列)"
+msgstr "ldap_user_object_class (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
msgid "The object class of a host entry in LDAP."
-msgstr "LDAP にあるホストエントリーのオブジェクトクラスです。"
+msgstr "LDAP にあるユーザーエントリーのオブジェクトクラスです。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: ipaHost"
-msgstr "初期値: ipaHost"
+msgstr "初期値: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr "ipa_host_fqdn (文字列)"
+msgstr "ipa_hostname (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains FQDN of the host."
-msgstr "ホストの FQDN を含む LDAP 属性です。"
+msgstr "グループのメンバーの名前を含む LDAP の属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr "初期値: fqdn"
+msgstr "初期値: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ipa_selinux_usermap_object_class (文字列)"
+msgstr "ldap_user_object_class (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr "ipa_selinux_usermap_name (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr "SELinux ユーザーマップの名前を含む LDAP 属性です。"
+msgstr "グループのメンバーの名前を含む LDAP の属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_selinux_usermap_member_user (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid ""
"The LDAP attribute that contains all users / groups this rule match against."
-msgstr "このルールが一致するすべてのユーザー・グループを含む LDAP 属性です。"
+msgstr "ユーザーの SSH 公開鍵を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_selinux_usermap_member_host (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
msgid ""
"The LDAP attribute that contains all hosts / hostgroups this rule match "
"against."
-msgstr "このルールが一致するホスト・ホストグループを含む LDAP 属性です。"
+msgstr ""
+"ネットワークグループの三つ組(ホスト、ユーザー、ドメイン)を含む LDAP 属性で"
+"す。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_selinux_usermap_see_also (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that contains DN of HBAC rule which can be used for "
"matching instead of memberUser and memberHost"
-msgstr ""
-"memberUser と memberHost の代わりにマッチに使用される HBAC ルールの DN を含"
-"む LDAP 属性です。"
+msgstr "ネットワークグループのメンバーの名前を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: ou"
msgid "Default: seeAlso"
-msgstr "初期値: seeAlso"
+msgstr "初期値: ou"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_selinux_usermap_selinux_user (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr "SELinux ユーザー文字列自身を含む LDAP 属性です。"
+msgstr "ユーザーの SSH 公開鍵を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: sudoUser"
msgid "Default: ipaSELinuxUser"
-msgstr "初期値: ipaSELinuxUser"
+msgstr "初期値: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ipa_selinux_usermap_enabled (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid ""
"The LDAP attribute that contains whether or not is user map enabled for "
"usage."
-msgstr ""
-"ユーザーマップが使用するために有効化されているかどうかを含む LDAP 属性です。"
+msgstr "ユーザーの初期シェルのパスを含む LDAP の属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: loginDisabled"
msgid "Default: ipaEnabledFlag"
-msgstr "初期値: ipaEnabledFlag"
+msgstr "初期値: loginDisabled"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ipa_selinux_usermap_user_category (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr "'all' のようなユーザーカテゴリーを含む LDAP 属性です。"
+msgstr "ユーザーの SSH 公開鍵を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: userCategory"
-msgstr "初期値: userCategory"
+msgstr "初期値: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ipa_selinux_usermap_host_category (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr "'all' のようなホストカテゴリーを含む LDAP 属性です。"
+msgstr "ユーザーの初期シェルのパスを含む LDAP の属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: hostCategory"
-msgstr "初期値: hostCategory"
+msgstr "初期値: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ipa_selinux_usermap_uuid (文字列)"
+msgstr "ipa_selinux_search_base (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr "ユーザーマップの一意な ID を含む LDAP 属性です。"
+msgstr "ユーザーのホームディレクトリーの名前を含む LDAP の属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr "初期値: ipaUniqueID"
+msgstr "初期値: nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ldap_user_ssh_public_key (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_host_ssh_public_key (文字列)"
+msgstr "ldap_user_ssh_public_key (文字列)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr "ホストの SSH 公開鍵を含む LDAP 属性です。"
+msgstr "ユーザーの SSH 公開鍵を含む LDAP 属性です。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr "初期値: ipaSshPubKey"
+msgstr "初期値: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -6666,11 +6749,24 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:57
+#, fuzzy
+#| msgid ""
+#| "However, it is neither necessary nor recommended to set these options. "
+#| "IPA provider can also be used as an access and chpass provider. As an "
+#| "access provider it uses HBAC (host-based access control) rules. Please "
+#| "refer to freeipa.org for more information about HBAC. No configuration of "
+#| "access provider is required on the client side."
msgid ""
"However, it is neither necessary nor recommended to set these options. The "
"AD provider can also be used as an access and chpass provider. No "
"configuration of the access provider is required on the client side."
msgstr ""
+"しかし、これらのオプションを設定することは必要ありません、また推奨もされませ"
+"ん。IPA プロバイダーはアクセスプロバイダーおよびパスワード変更プロバイダーと"
+"しても使用できます。アクセスプロバイダーとしては、HBAC (ホストベースアクセス"
+"制御) ルールを使用します。HBAC の詳細は freeipa.org を参照してください。アク"
+"セスプロバイダーが設定されていなければ、クライアント側において必要になりま"
+"す。"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:69
@@ -6768,15 +6864,12 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:193
-#, fuzzy, no-wrap
-#| msgid ""
-#| "override_homedir = /home/%u\n"
-#| " "
+#, no-wrap
msgid ""
"fallback_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para>
@@ -7242,16 +7335,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:193
-#, fuzzy
-#| msgid ""
-#| "If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-#| "debug messages will be sent to stderr."
msgid ""
"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
"applications will not use the fast in memory cache."
msgstr ""
-"環境変数 SSSD_KRB5_LOCATOR_DEBUG に何らかの値が設定されていると、デバッグメッ"
-"セージが標準エラーに送られます。"
#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
@@ -7704,14 +7791,6 @@ msgid ""
"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
"</citerefentry> for details) is created."
msgstr ""
-"クレディンシャルキャッシュを保存するディレクトリーです。すべての "
-"krb5_ccname_template の置換シーケンスが、%d と %P を除き、ここで使用できま"
-"す。ディレクトリーが存在しなければ、作成されます。%u, %U, %p または %h が使用"
-"されていると、ユーザーが所属するプライベートディレクトリーが作成されます。そ"
-"うでなければ、削除制限フラグ(つまり、詳細が <citerefentry> "
-"<refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> </"
-"citerefentry> に記載されているとおり、スティッキービットです)を持つ公開ディ"
-"レクトリーが作成されます。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:152
@@ -7761,7 +7840,7 @@ msgstr "ホームディレクトリー"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:192
msgid "value of krb5ccache_dir"
-msgstr "krb5ccache_dir の値"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:197
@@ -7784,18 +7863,11 @@ msgid ""
"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
"used to create a unique filename in a safe way."
msgstr ""
-"ユーザーのクレディンシャルキャッシュの場所です。二つのクレディンシャルキャッ"
-"シュ形式が現在サポートされます。<quote>FILE</quote> および <quote>DIR</"
-"quote>。キャッシュは <replaceable>TYPE:RESIDUAL</replaceable> または絶対パス"
-"(<quote>FILE</quote> 形式を意味します)のどちらかとして指定できます。テンプ"
-"レートにおいて以下の部分が置換されます: <placeholder type=\"variablelist\" "
-"id=\"0\"/> テンプレートが 'XXXXXX' で終わると、mkstemp(3) が安全な方法で一意"
-"なファイル名を作成するために使用されます。"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:212
msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr "初期値: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:218
@@ -9347,9 +9419,6 @@ msgid ""
"default value as well as the lowest allowed value, 0xFFF0 is the most "
"verbose mode. This setting overrides the settings from config file."
msgstr ""
-"デバッグレベルを指示するビットマスクは見ることができます。 0x0010 は初期値で"
-"あり、利用できる最小値です。 0xFFF0 は最も冗長なモードです。この設定は設定"
-"ファイルの設定により上書きされます。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:8
@@ -9362,8 +9431,6 @@ msgid ""
"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
"SSSD from starting up or causes it to cease running."
msgstr ""
-"<emphasis>0x0010</emphasis>: 致命的なエラー。 SSSD が開始するのを妨げる、また"
-"は実行を中断させることすべてです。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:15
@@ -9372,8 +9439,6 @@ msgid ""
"the SSSD, but one that indicates that at least one major feature is not "
"going to work properly."
msgstr ""
-"<emphasis>0x0020</emphasis>: 重大なエラー。 SSSD が強制停止しないが、複数の機"
-"能が正しく動作しないエラーです。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:20
@@ -9381,8 +9446,6 @@ msgid ""
"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
"particular request or operation has failed."
msgstr ""
-"<emphasis>0x0040</emphasis>: 深刻なエラー。特定の要求や操作が失敗したことを通"
-"知するエラーです。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:24
@@ -9390,29 +9453,40 @@ msgid ""
"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
"percolate down to cause the operation failure of 2."
msgstr ""
-"<emphasis>0x0080</emphasis>: 軽微なエラー。これらは 2 の操作失敗を引き起こす"
-"よう下にしみだすエラーです。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid "<emphasis>2</emphasis>: show informational messages"
msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>0x0100</emphasis>: 設定値の設定です。"
+msgstr "<emphasis>2</emphasis>: 情報レベルのメッセージを表示する"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>d</emphasis> for days."
msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>0x0200</emphasis>: 関数のデータです。"
+msgstr "日は <emphasis>d</emphasis>"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr "<emphasis>0x0400</emphasis>: 操作関数のトレースメッセージです。"
+msgstr "<emphasis>3</emphasis>: すべてのメッセージとデバッグ情報を表示する"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid ""
+#| "<emphasis>Example</emphasis>: To log fatal failures, configuration "
+#| "settings, function data, trace messages for internal control functions "
+#| "use 0x1310."
msgid ""
"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
-msgstr "<emphasis>0x1000</emphasis>: 内部制御関数のトレースメッセージです。"
+msgstr ""
+"<emphasis>例</emphasis>: 致命的なエラー、設定値の設定、関数データ、内部制御関"
+"数のトレースメッセージをログに取得するには 0x1310 を使用します。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
@@ -9420,12 +9494,13 @@ msgid ""
"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
"may be interesting."
msgstr ""
-"<emphasis>0x2000</emphasis>: 興味があるかもしれない関数の内部変数の内容です。"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr "<emphasis>0x4000</emphasis>: 極めて低レベルのトレース情報です。"
+msgstr "<emphasis>3</emphasis>: すべてのメッセージとデバッグ情報を表示する"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:46
@@ -9433,8 +9508,6 @@ msgid ""
"To log required debug levels, simply add their numbers together as shown in "
"following examples:"
msgstr ""
-"必要となるデバッグレベルをログに取得するには、以下の例に示されるようにこれら"
-"の数字を単に追加します:"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:49
@@ -9460,8 +9533,6 @@ msgid ""
"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
msgstr ""
-"<emphasis>注</emphasis>: これは 1.7.0 において導入されたデバッグレベルの新し"
-"い形式です。古い形式(0-10 の数字)は互換性がありますが、推奨されません。"
#. type: Content of: outside any tag (error?)
#: include/experimental.xml:1
@@ -9503,45 +9574,6 @@ msgstr "関連項目"
#. type: Content of: <refsect1><para>
#: include/seealso.xml:4
-#, fuzzy
-#| msgid ""
-#| "<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
-#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
-#| "citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
-#| "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
-#| "citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
-#| "refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
-#| "manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> "
-#| "<citerefentry> <refentrytitle>sss_ssh_authorizedkeys</refentrytitle> "
-#| "<manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-#| "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
-#| "manvolnum> </citerefentry>, </phrase> <citerefentry> "
-#| "<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
-#| "citerefentry>."
msgid ""
"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
@@ -9580,42 +9612,6 @@ msgid ""
"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
msgstr ""
-"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
-"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
-"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
-"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
-"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
-"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
-"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
-"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>, <citerefentry> "
-"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
-"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
-"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:3
@@ -9643,11 +9639,17 @@ msgstr "構文: <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:13
#: include/ldap_search_bases_experimental.xml:13
+#, fuzzy
+#| msgid ""
+#| "The filter must be a valid LDAP search filter as specified by http://www."
+#| "ietf.org/rfc/rfc2254.txt"
msgid ""
"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
"rfc2254.txt"
msgstr ""
+"フィルターは http://www.ietf.org/rfc/rfc2254.txt により指定されたような有効"
+"な LDAP 検索フィルターである必要があります。"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:19
@@ -9726,9 +9728,6 @@ msgstr ""
#~ msgid "Default: 1200 (seconds)"
#~ msgstr "初期値: 1200 (秒)"
-#~ msgid "ipa_enable_dns_sites (boolean)"
-#~ msgstr "ipa_enable_dns_sites (論理値)"
-
#~ msgid "Enables DNS sites - location based service discovery."
#~ msgstr "DNS サイトの有効化 - 位置情報に基づいたサービス探索。"
@@ -9757,9 +9756,6 @@ msgstr ""
#~ msgid "ipa_server_mode (boolean)"
#~ msgstr "ipa_server_mode (論理値)"
-#~ msgid "This options should only be set by the IPA installer."
-#~ msgstr "このオプションは IPA インストーラーによってのみ設定されるべきです。"
-
#~ msgid "ad_enable_dns_sites (boolean)"
#~ msgstr "ad_enable_dns_sites (論理値)"
diff --git a/src/man/po/lv.po b/src/man/po/lv.po
index e5164f220..c4488a6f8 100644
--- a/src/man/po/lv.po
+++ b/src/man/po/lv.po
@@ -4,14 +4,15 @@
#
# Translators:
# Kristaps, 2012
+# Kristaps, 2012
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Latvian (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Latvian (http://www.transifex.com/projects/p/sssd/language/"
"lv/)\n"
"Language: lv\n"
"MIME-Version: 1.0\n"
@@ -5570,8 +5571,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: memberUser"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5587,8 +5590,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: memberHost"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5604,8 +5609,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: externalHost"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
@@ -5619,8 +5626,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: shadowMin"
msgid "Default: nisDomainName"
-msgstr ""
+msgstr "Noklusējuma: shadowMin"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
@@ -5634,8 +5643,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: uid"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "Noklusējuma: uid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5649,8 +5660,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: uid"
msgid "Default: fqdn"
-msgstr ""
+msgstr "Noklusējuma: uid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5704,8 +5717,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: 1"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Noklusējuma: 1"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5719,8 +5734,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
@@ -5736,8 +5753,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: ldap"
msgid "Default: ipaEnabledFlag"
-msgstr ""
+msgstr "Noklusējuma: ldap"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
@@ -5751,8 +5770,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
@@ -5766,8 +5787,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
@@ -5781,8 +5804,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
@@ -5796,8 +5821,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: filter"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Noklusējuma: filtrēt"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
diff --git a/src/man/po/nl.po b/src/man/po/nl.po
index 2542f2d4e..8fac4ac33 100644
--- a/src/man/po/nl.po
+++ b/src/man/po/nl.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Dutch (http://www.transifex.com/projects/p/sssd/language/"
"nl/)\n"
"Language: nl\n"
"MIME-Version: 1.0\n"
@@ -1145,8 +1145,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure any service."
msgid "These options can be used to configure the sudo service."
-msgstr ""
+msgstr "Deze opties kunnen gebruikt worden om services te configureren."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -5626,8 +5628,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: memberUser"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5643,8 +5647,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: memberHost"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5660,13 +5666,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: externalHost"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "full_name_format (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr ""
+msgstr "full_name_format (tekst)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
@@ -5690,8 +5700,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "Standaard: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5705,8 +5717,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: fqdn"
-msgstr ""
+msgstr "Standaard: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5760,8 +5774,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Standaard: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5775,8 +5791,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
@@ -5807,8 +5825,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
@@ -5822,8 +5842,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
@@ -5837,8 +5859,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
@@ -5852,8 +5876,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Standaard: true"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
diff --git a/src/man/po/po4a.cfg b/src/man/po/po4a.cfg
index 8a15d447a..430b2891f 100644
--- a/src/man/po/po4a.cfg
+++ b/src/man/po/po4a.cfg
@@ -1,4 +1,4 @@
-[po4a_langs] br ca cs eu es fr ja lv nl pt ru tg uk zh_CN
+[po4a_langs] br ca cs de eu es fr ja lv nl pt pt_BR ru sv tg uk zh_CN
[po4a_paths] po/sssd-docs.pot $lang:po/$lang.po
[type:docbook] sss_groupmod.8.xml $lang:$(builddir)/$lang/sss_groupmod.8.xml
[type:docbook] sssd.conf.5.xml $lang:$(builddir)/$lang/sssd.conf.5.xml
diff --git a/src/man/po/pt.po b/src/man/po/pt.po
index 9706eeae6..07dbcfd58 100644
--- a/src/man/po/pt.po
+++ b/src/man/po/pt.po
@@ -8,11 +8,11 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Portuguese (http://www.transifex.com/projects/p/fedora/"
-"language/pt/)\n"
+"Language-Team: Portuguese (http://www.transifex.com/projects/p/sssd/language/"
+"pt/)\n"
"Language: pt\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -4820,8 +4820,10 @@ msgstr "ldap_group_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr "ldap_user_search_filter (string)"
+msgstr "ldap_user_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -4854,8 +4856,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr "ldap_group_search_filter (string)"
+msgstr "ldap_group_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -4959,12 +4963,6 @@ msgid ""
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
"arg>"
msgstr ""
-"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
-"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
-"arg>"
#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:45
@@ -5618,8 +5616,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_search_base (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr ""
+msgstr "ldap_netgroup_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
@@ -5628,8 +5628,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_search_base (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr ""
+msgstr "ldap_netgroup_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
@@ -5640,13 +5642,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: True"
msgid "Default: memberUser"
-msgstr "Padrão: memberUser"
+msgstr "Padrão: TRUE"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_search_base (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr "ipa_netgroup_member_host (string)"
+msgstr "ldap_netgroup_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
@@ -5657,13 +5663,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: memberHost"
-msgstr "Padrão: memberHost"
+msgstr "Padrão: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_search_base (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr "ipa_netgroup_member_ext_host (string)"
+msgstr "ldap_netgroup_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
@@ -5674,13 +5684,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: externalHost"
-msgstr "Padrão: externalHost"
+msgstr "Padrão: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr "ipa_netgroup_domain (string)"
+msgstr "ipa_domain (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
@@ -5689,13 +5703,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr "Padrão: nisDomainName"
+msgstr "Padrão: none"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_object_class (string)"
-msgstr "ipa_host_object_class (string)"
+msgstr "ipa_hostname (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
@@ -5704,13 +5722,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: ipaHost"
-msgstr "Padrão: ipaHost"
+msgstr "Padrão: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr "ipa_host_fqdn (string)"
+msgstr "ipa_hostname (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
@@ -5719,18 +5741,24 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr "Padrão: fqdn"
+msgstr "Padrão: NC"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ipa_hbac_search_base (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr ""
+msgstr "ipa_hbac_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ldap_user_fullname (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr ""
+msgstr "ldap_user_fullname (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
@@ -5739,8 +5767,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_hbac_search_base (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr ""
+msgstr "ipa_hbac_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
@@ -5762,8 +5792,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr ""
+msgstr "ldap_user_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
@@ -5774,8 +5806,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Padrão: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5789,13 +5823,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Padrão: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_hbac_search_base (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr ""
+msgstr "ipa_hbac_search_base (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
@@ -5806,13 +5844,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaEnabledFlag"
-msgstr ""
+msgstr "Padrão: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "base_directory (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr ""
+msgstr "base_directory (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
@@ -5821,13 +5863,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Padrão: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ldap_user_shadow_last_change (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr ""
+msgstr "ldap_user_shadow_last_change (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
@@ -5836,13 +5882,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Padrão: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ldap_user_uuid (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr ""
+msgstr "ldap_user_uuid (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
@@ -5851,13 +5901,17 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Padrão: nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr ""
+msgstr "ipa_hostname (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
@@ -5866,8 +5920,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Padrão: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -6880,7 +6936,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:192
msgid "value of krb5ccache_dir"
-msgstr "valor de krb5ccache_dir"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:197
@@ -6907,7 +6963,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:212
msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr "Padrão: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:218
diff --git a/src/man/po/pt_BR.po b/src/man/po/pt_BR.po
new file mode 100644
index 000000000..a0eae72cb
--- /dev/null
+++ b/src/man/po/pt_BR.po
@@ -0,0 +1,8436 @@
+# SOME DESCRIPTIVE TITLE
+# Copyright (C) YEAR Red Hat
+# This file is distributed under the same license as the sssd-docs package.
+#
+# Translators:
+# Juranir dos Santos <juranir.santos@gmail.com>, 2014
+msgid ""
+msgstr ""
+"Project-Id-Version: SSSD\n"
+"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-07-04 15:09+0000\n"
+"Last-Translator: Marcelo Barbosa <firemanxbr@fedoraproject.org>\n"
+"Language-Team: Portuguese (Brazil) (http://www.transifex.com/projects/p/sssd/"
+"language/pt_BR/)\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+
+#. type: Content of: <reference><title>
+#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
+#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
+#: sssd-ad.5.xml:5 sssd-sudo.5.xml:5 sssd.8.xml:5 sss_obfuscate.8.xml:5
+#: sss_useradd.8.xml:5 sssd-krb5.5.xml:5 sss_groupadd.8.xml:5
+#: sss_userdel.8.xml:5 sss_groupdel.8.xml:5 sss_groupshow.8.xml:5
+#: sss_usermod.8.xml:5 sss_cache.8.xml:5 sss_debuglevel.8.xml:5
+#: sss_seed.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
+#: sss_ssh_knownhostsproxy.1.xml:5
+msgid "SSSD Manual pages"
+msgstr "Páginas de Manuais do SSSD"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
+msgid "sss_groupmod"
+msgstr "sss_groupmod"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
+#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
+#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
+#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
+#: sss_debuglevel.8.xml:11 sss_seed.8.xml:11
+msgid "8"
+msgstr "8"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupmod.8.xml:16
+msgid "modify a group"
+msgstr "Modificar um grupo"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupmod.8.xml:21
+msgid ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opções</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
+#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
+#: sssd-ad.5.xml:21 sssd-sudo.5.xml:21 sssd.8.xml:29 sss_obfuscate.8.xml:30
+#: sss_useradd.8.xml:30 sssd-krb5.5.xml:21 sss_groupadd.8.xml:30
+#: sss_userdel.8.xml:30 sss_groupdel.8.xml:30 sss_groupshow.8.xml:30
+#: sss_usermod.8.xml:30 sss_cache.8.xml:29 sss_debuglevel.8.xml:30
+#: sss_seed.8.xml:31 sss_ssh_authorizedkeys.1.xml:30
+#: sss_ssh_knownhostsproxy.1.xml:31
+msgid "DESCRIPTION"
+msgstr "DESCRIÇÃO"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupmod.8.xml:32
+msgid ""
+"<command>sss_groupmod</command> modifies the group to reflect the changes "
+"that are specified on the command line."
+msgstr ""
+"<command>sss_groupmod</command> modifica o grupo em questão seguindo os "
+"parametros especificados no comando."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
+#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
+#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
+#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_seed.8.xml:42
+#: sss_ssh_authorizedkeys.1.xml:75 sss_ssh_knownhostsproxy.1.xml:62
+msgid "OPTIONS"
+msgstr "OPÇÕES"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
+msgid ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:48
+msgid ""
+"Append this group to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
+msgid ""
+"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:62
+msgid ""
+"Remove this group from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
+msgid "sssd.conf"
+msgstr "sssd.conf"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
+#: sssd-ipa.5.xml:11 sssd-ad.5.xml:11 sssd-sudo.5.xml:11 sssd-krb5.5.xml:11
+msgid "5"
+msgstr "5"
+
+#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
+#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
+#: sssd-ipa.5.xml:12 sssd-ad.5.xml:12 sssd-sudo.5.xml:12 sssd-krb5.5.xml:12
+msgid "File Formats and Conventions"
+msgstr "Formato do arquivo e Convenções"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
+#: sssd-ipa.5.xml:17 sssd-ad.5.xml:17 sssd-krb5.5.xml:17
+msgid "the configuration file for SSSD"
+msgstr "o arquivo de configuração do SSSD"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:21
+msgid "FILE FORMAT"
+msgstr "FORMATO DO ARQUIVO"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:29
+#, no-wrap
+msgid ""
+" <replaceable>[section]</replaceable>\n"
+" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
+" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
+" "
+msgstr ""
+" <replaceable>[section]</replaceable>\n"
+" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
+" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:24
+msgid ""
+"The file has an ini-style syntax and consists of sections and parameters. A "
+"section begins with the name of the section in square brackets and continues "
+"until the next section begins. An example of section with single and multi-"
+"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:36
+msgid ""
+"The data types used are string (no quotes needed), integer and bool (with "
+"values of <quote>TRUE/FALSE</quote>)."
+msgstr ""
+"O tipo de dados deve ser uma string (sem aspas) do tipo integer e boll (com "
+"valores <quote>TRUE/FALSE</quote>)"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:41
+msgid ""
+"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
+"(<quote>;</quote>). Inline comments are not supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:47
+msgid ""
+"All sections can have an optional <replaceable>description</replaceable> "
+"parameter. Its function is only as a label for the section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:53
+msgid ""
+"<filename>sssd.conf</filename> must be a regular file, owned by root and "
+"only root may read from or write to the file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:59
+msgid "SPECIAL SECTIONS"
+msgstr "SEÇÕES ESPECIAIS"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:62
+msgid "The [sssd] section"
+msgstr "A seção [SSSD]"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
+#: sssd.conf.5.xml:71 sssd.conf.5.xml:1771
+msgid "Section parameters"
+msgstr "Parâmetros da seção"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:73
+msgid "config_file_version (integer)"
+msgstr "config_file_version (inteiro)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:76
+msgid ""
+"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
+"version 2."
+msgstr ""
+"Indica que a sintaxe do arquivo de configuração do SSSD 0.6.0 e posteriores "
+"utilizam a versão 2."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:82
+msgid "services"
+msgstr "serviços"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:85
+msgid ""
+"Comma separated list of services that are started when sssd itself starts."
+msgstr ""
+"Deve ser separados por virgula a lista de serviços que serão iniciados junto "
+"com o sssd."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:89
+msgid ""
+"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
+"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
+"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
+"phrase>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
+msgid "reconnection_retries (integer)"
+msgstr "reconnection_retries (inteiro)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:101 sssd.conf.5.xml:293
+msgid ""
+"Number of times services should attempt to reconnect in the event of a Data "
+"Provider crash or restart before they give up"
+msgstr ""
+"Número de vezes que o serviço tentará reconectar em caso de um acidente com "
+"o Provedor de Dados ou reiniciar antes de desistir."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:106 sssd.conf.5.xml:298
+msgid "Default: 3"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:111
+msgid "domains"
+msgstr "Domínio"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:114
+msgid ""
+"A domain is a database containing user information. SSSD can use more "
+"domains at the same time, but at least one must be configured or SSSD won't "
+"start. This parameter described the list of domains in the order you want "
+"them to be queried."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:124 sssd.conf.5.xml:1551
+msgid "re_expression (string)"
+msgstr "re_expression (string)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:127
+msgid ""
+"Default regular expression that describes how to parse the string containing "
+"user name and domain into these components."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:132
+msgid ""
+"Each domain can have an individual regular expression configured. For some "
+"ID providers there are also default regular expressions. See DOMAIN "
+"SECTIONS for more info on these regular expressions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:141 sssd.conf.5.xml:1598
+msgid "full_name_format (string)"
+msgstr "full_name_format (string)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:144
+msgid ""
+"The default <citerefentry> <refentrytitle>printf</refentrytitle> "
+"<manvolnum>3</manvolnum> </citerefentry>-compatible format that describes "
+"how to translate a (name, domain) tuple into a fully qualified name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:152
+msgid ""
+"Each domain can have an individual format string configured. see DOMAIN "
+"SECTIONS for more info on this option."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:158
+msgid "try_inotify (boolean)"
+msgstr "try_inotify (boleano)"
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:161
+msgid ""
+"SSSD monitors the state of resolv.conf to identify when it needs to update "
+"its internal DNS resolver. By default, we will attempt to use inotify for "
+"this, and will fall back to polling resolv.conf every five seconds if "
+"inotify cannot be used."
+msgstr ""
+"SSSD monitora o estado do resolv.conf para identificar quando será "
+"necessário atualizar o DNS interno. Por padrão, vamos tentar utilizar "
+"inotify para essa tarefa, a a cada 5 segundos ele voltará a tentar caso o "
+"inotify não possa ser utilizado."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:169
+msgid ""
+"There are some limited situations where it is preferred that we should skip "
+"even trying to use inotify. In these rare cases, this option should be set "
+"to 'false'"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:175
+msgid ""
+"Default: true on platforms where inotify is supported. False on other "
+"platforms."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:179
+msgid ""
+"Note: this option will have no effect on platforms where inotify is "
+"unavailable. On these platforms, polling will always be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:186
+msgid "krb5_rcache_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:189
+msgid ""
+"Directory on the filesystem where SSSD should store Kerberos replay cache "
+"files."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:193
+msgid ""
+"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
+"SSSD to let libkrb5 decide the appropriate location for the replay cache."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:199
+msgid ""
+"Default: Distribution-specific and specified at build-time. "
+"(__LIBKRB5_DEFAULTS__ if not configured)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:206
+msgid "default_domain_suffix (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:209
+msgid ""
+"This string will be used as a default domain name for all names without a "
+"domain name component. The main use case is environments where the primary "
+"domain is intended for managing host policies and all users are located in a "
+"trusted domain. The option allows those users to log in just with their "
+"user name without giving a domain name as well."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:219
+msgid ""
+"Please note that if this option is set all users from the primary domain "
+"have to use their fully qualified name, e.g. user@domain.name, to log in."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:225 sssd-ldap.5.xml:1357 sssd-ldap.5.xml:1369
+#: sssd-ldap.5.xml:1430 sssd-ldap.5.xml:2276 sssd-ldap.5.xml:2303
+#: sssd-krb5.5.xml:366 include/ldap_id_mapping.xml:145
+#: include/ldap_id_mapping.xml:156
+msgid "Default: not set"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:64
+msgid ""
+"Individual pieces of SSSD functionality are provided by special SSSD "
+"services that are started and stopped together with SSSD. The services are "
+"managed by a special service frequently called <quote>monitor</quote>. The "
+"<quote>[sssd]</quote> section is used to configure the monitor as well as "
+"some other important options like the identity domains. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:236
+msgid "SERVICES SECTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:238
+msgid ""
+"Settings that can be used to configure different services are described in "
+"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
+"section, for example, for NSS service, the section would be <quote>[nss]</"
+"quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:245
+msgid "General service configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:247
+msgid "These options can be used to configure any service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:251
+msgid "debug_level (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:255
+msgid "debug_timestamps (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:258
+msgid "Add a timestamp to the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:261 sssd.conf.5.xml:441 sssd.conf.5.xml:841
+#: sssd-ldap.5.xml:1503 sssd-ldap.5.xml:1629 sssd-ldap.5.xml:2064
+#: sssd-ldap.5.xml:2129 sssd-ldap.5.xml:2147 sssd-ipa.5.xml:250
+#: sssd-ipa.5.xml:285
+msgid "Default: true"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:266
+msgid "debug_microseconds (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:269
+msgid "Add microseconds to the timestamp in debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:272 sssd.conf.5.xml:795 sssd.conf.5.xml:1705
+#: sssd-ldap.5.xml:640 sssd-ldap.5.xml:1398 sssd-ldap.5.xml:1417
+#: sssd-ldap.5.xml:1572 sssd-ldap.5.xml:1860 sssd-ipa.5.xml:129
+#: sssd-ipa.5.xml:345 sssd-krb5.5.xml:244 sssd-krb5.5.xml:278
+#: sssd-krb5.5.xml:427
+msgid "Default: false"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:277
+msgid "timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:280
+msgid ""
+"Timeout in seconds between heartbeats for this service. This is used to "
+"ensure that the process is alive and capable of answering requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:285 sssd-ldap.5.xml:1269
+msgid "Default: 10"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:303
+msgid "fd_limit"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:306
+msgid ""
+"This option specifies the maximum number of file descriptors that may be "
+"opened at one time by this SSSD process. On systems where SSSD is granted "
+"the CAP_SYS_RESOURCE capability, this will be an absolute setting. On "
+"systems without this capability, the resulting value will be the lower value "
+"of this or the limits.conf \"hard\" limit."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:315
+msgid "Default: 8192 (or limits.conf \"hard\" limit)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:320
+msgid "client_idle_timeout"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:323
+msgid ""
+"This option specifies the number of seconds that a client of an SSSD process "
+"can hold onto a file descriptor without communicating on it. This value is "
+"limited in order to avoid resource exhaustion on the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:330 sssd.conf.5.xml:346 sssd.conf.5.xml:613
+#: sssd.conf.5.xml:773 sssd.conf.5.xml:1009 sssd-ldap.5.xml:1099
+msgid "Default: 60"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:335 sssd.conf.5.xml:998
+msgid "force_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:338 sssd.conf.5.xml:1001
+msgid ""
+"If a service is not responding to ping checks (see the <quote>timeout</"
+"quote> option), it is first sent the SIGTERM signal that instructs it to "
+"quit gracefully. If the service does not terminate after "
+"<quote>force_timeout</quote> seconds, the monitor will forcibly shut it down "
+"by sending a SIGKILL signal."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:354
+msgid "NSS configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:356
+msgid ""
+"These options can be used to configure the Name Service Switch (NSS) service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:361
+msgid "enum_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:364
+msgid ""
+"How many seconds should nss_sss cache enumerations (requests for info about "
+"all users)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:368
+msgid "Default: 120"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:373
+msgid "entry_cache_nowait_percentage (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:376
+msgid ""
+"The entry cache can be set to automatically update entries in the background "
+"if they are requested beyond a percentage of the entry_cache_timeout value "
+"for the domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:382
+msgid ""
+"For example, if the domain's entry_cache_timeout is set to 30s and "
+"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
+"after 15 seconds past the last cache update will be returned immediately, "
+"but the SSSD will go and update the cache on its own, so that future "
+"requests will not need to block waiting for a cache update."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:392
+msgid ""
+"Valid values for this option are 0-99 and represent a percentage of the "
+"entry_cache_timeout for each domain. For performance reasons, this "
+"percentage will never reduce the nowait timeout to less than 10 seconds. (0 "
+"disables this feature)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:400
+msgid "Default: 50"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:405
+msgid "entry_negative_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:408
+msgid ""
+"Specifies for how many seconds nss_sss should cache negative cache hits "
+"(that is, queries for invalid database entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:414 sssd.conf.5.xml:819 sssd-krb5.5.xml:226
+msgid "Default: 15"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:419
+msgid "filter_users, filter_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:422
+msgid ""
+"Exclude certain users from being fetched from the sss NSS database. This is "
+"particularly useful for system accounts. This option can also be set per-"
+"domain or include fully-qualified names to filter only users from the "
+"particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:429
+msgid "Default: root"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:434
+msgid "filter_users_in_groups (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:437
+msgid ""
+"If you want filtered user still be group members set this option to false."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:446 sssd-ad.5.xml:132
+msgid "override_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:455 sssd-ad.5.xml:141 sssd-krb5.5.xml:169
+msgid "%u"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:456 sssd-ad.5.xml:142 sssd-krb5.5.xml:170
+msgid "login name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:459 sssd-ad.5.xml:145 sssd-krb5.5.xml:173
+msgid "%U"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:460 sssd-ad.5.xml:146
+msgid "UID number"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:463 sssd-ad.5.xml:149 sssd-krb5.5.xml:191
+msgid "%d"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:464 sssd-ad.5.xml:150
+msgid "domain name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:467 sssd-ad.5.xml:153
+msgid "%f"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:468 sssd-ad.5.xml:154
+msgid "fully qualified user name (user@domain)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:471
+msgid "%o"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:473
+msgid "The original home directory retrieved from the identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:478 sssd-ad.5.xml:157 sssd-krb5.5.xml:203
+msgid "%%"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:479 sssd-ad.5.xml:158 sssd-krb5.5.xml:204
+msgid "a literal '%'"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:449 sssd-ad.5.xml:135
+msgid ""
+"Override the user's home directory. You can either provide an absolute value "
+"or a template. In the template, the following sequences are substituted: "
+"<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:485 sssd-ad.5.xml:164
+msgid "This option can also be set per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
+#, no-wrap
+msgid ""
+"override_homedir = /home/%u\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:488 sssd.conf.5.xml:512 sssd-ad.5.xml:167 sssd-ad.5.xml:191
+msgid "example: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:494 sssd-ad.5.xml:173
+msgid "Default: Not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:500 sssd-ad.5.xml:179
+msgid "fallback_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:503 sssd-ad.5.xml:182
+msgid ""
+"Set a default template for a user's home directory if one is not specified "
+"explicitly by the domain's data provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:508 sssd-ad.5.xml:187
+msgid ""
+"The available values for this option are the same as for override_homedir."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:518 sssd-ad.5.xml:197
+msgid "Default: not set (no substitution for unset home directories)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:524
+msgid "override_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:527
+msgid ""
+"Override the login shell for all users. This option can be specified "
+"globally in the [nss] section or per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:532
+msgid "Default: not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:538
+msgid "allowed_shells (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:541
+msgid ""
+"Restrict user shell to one of the listed values. The order of evaluation is:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:544
+msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:548
+msgid ""
+"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
+"quote>, use the value of the shell_fallback parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:553
+msgid ""
+"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
+"shells</quote>, a nologin shell is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:558
+msgid "An empty string for shell is passed as-is to libc."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:561
+msgid ""
+"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
+"that a restart of the SSSD is required in case a new shell is installed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:565
+msgid "Default: Not set. The user shell is automatically used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:570
+msgid "vetoed_shells (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:573
+msgid "Replace any instance of these shells with the shell_fallback"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:578
+msgid "shell_fallback (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:581
+msgid ""
+"The default shell to use if an allowed shell is not installed on the machine."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:585
+msgid "Default: /bin/sh"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:590 sssd-ad.5.xml:203
+msgid "default_shell"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:593 sssd-ad.5.xml:206
+msgid ""
+"The default shell to use if the provider does not return one during lookup. "
+"This option supersedes any other shell options if it takes effect and can be "
+"set either in the [nss] section or per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
+msgid ""
+"Default: not set (Return NULL if no shell is specified and rely on libc to "
+"substitute something sensible when necessary, usually /bin/sh)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:606 sssd.conf.5.xml:766
+msgid "get_domains_timeout (int)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:609 sssd.conf.5.xml:769
+msgid ""
+"Specifies time in seconds for which the list of subdomains will be "
+"considered valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:618
+msgid "memcache_timeout (int)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:621
+msgid ""
+"Specifies time in seconds for which records in the in-memory cache will be "
+"valid"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:625 sssd-ldap.5.xml:654
+msgid "Default: 300"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:632
+msgid "PAM configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:634
+msgid ""
+"These options can be used to configure the Pluggable Authentication Module "
+"(PAM) service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:639
+msgid "offline_credentials_expiration (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:642
+msgid ""
+"If the authentication provider is offline, how long should we allow cached "
+"logins (in days since the last successful online login)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:647 sssd.conf.5.xml:660
+msgid "Default: 0 (No limit)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:653
+msgid "offline_failed_login_attempts (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:656
+msgid ""
+"If the authentication provider is offline, how many failed login attempts "
+"are allowed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:666
+msgid "offline_failed_login_delay (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:669
+msgid ""
+"The time in minutes which has to pass after offline_failed_login_attempts "
+"has been reached before a new login attempt is possible."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:674
+msgid ""
+"If set to 0 the user cannot authenticate offline if "
+"offline_failed_login_attempts has been reached. Only a successful online "
+"authentication can enable offline authentication again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:680 sssd.conf.5.xml:733
+msgid "Default: 5"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:686
+msgid "pam_verbosity (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:689
+msgid ""
+"Controls what kind of messages are shown to the user during authentication. "
+"The higher the number to more messages are displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:694
+msgid "Currently sssd supports the following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:697
+msgid "<emphasis>0</emphasis>: do not show any message"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:700
+msgid "<emphasis>1</emphasis>: show only important messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:704
+msgid "<emphasis>2</emphasis>: show informational messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:707
+msgid "<emphasis>3</emphasis>: show all messages and debug information"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:711 sssd.8.xml:63
+msgid "Default: 1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:716
+msgid "pam_id_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:719
+msgid ""
+"For any PAM request while SSSD is online, the SSSD will attempt to "
+"immediately update the cached identity information for the user in order to "
+"ensure that authentication takes place with the latest information."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:725
+msgid ""
+"A complete PAM conversation may perform multiple PAM requests, such as "
+"account management and session opening. This option controls (on a per-"
+"client-application basis) how long (in seconds) we can cache the identity "
+"information to avoid excessive round-trips to the identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:739
+msgid "pam_pwd_expiration_warning (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:742 sssd.conf.5.xml:1159
+msgid "Display a warning N days before the password expires."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:745
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:751 sssd.conf.5.xml:1162
+msgid ""
+"If zero is set, then this filter is not applied, i.e. if the expiration "
+"warning was received from backend server, it will automatically be displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:756
+msgid ""
+"This setting can be overridden by setting <emphasis>pwd_expiration_warning</"
+"emphasis> for a particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:761 sssd.8.xml:79
+msgid "Default: 0"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:781
+msgid "SUDO configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:783
+msgid "These options can be used to configure the sudo service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:787
+msgid "sudo_timed (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:790
+msgid ""
+"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
+"that implement time-dependent sudoers entries."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:803
+msgid "AUTOFS configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:805
+msgid "These options can be used to configure the autofs service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:809
+msgid "autofs_negative_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:812
+msgid ""
+"Specifies for how many seconds should the autofs responder negative cache "
+"hits (that is, queries for invalid map entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:828
+msgid "SSH configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:830
+msgid "These options can be used to configure the SSH service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:834
+msgid "ssh_hash_known_hosts (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:837
+msgid ""
+"Whether or not to hash host names and addresses in the managed known_hosts "
+"file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:846
+msgid "ssh_known_hosts_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:849
+msgid ""
+"How many seconds to keep a host in the managed known_hosts file after its "
+"host keys were requested."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:853
+msgid "Default: 180"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:861
+msgid "PAC responder configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:863
+msgid ""
+"The PAC responder works together with the authorization data plugin for MIT "
+"Kerberos sssd_pac_plugin.so and a sub-domain provider. The plugin sends the "
+"PAC data during a GSSAPI authentication to the PAC responder. The sub-domain "
+"provider collects domain SID and ID ranges of the domain the client is "
+"joined to and of remote trusted domains from the local domain controller. "
+"If the PAC is decoded and evaluated some of the following operations are "
+"done:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:872
+msgid ""
+"If the remote user does not exist in the cache, it is created. The uid is "
+"calculated based on the SID, trusted domains will have UPGs and the gid will "
+"have the same value as the uid. The home directory is set based on the "
+"subdomain_homedir parameter. The shell will be empty by default, i.e. the "
+"system defaults are used, but can be overwritten with the default_shell "
+"parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:880
+msgid ""
+"If there are SIDs of groups from the domain the sssd client belongs to, the "
+"user will be added to those groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:886
+msgid "These options can be used to configure the PAC responder."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:890
+msgid "allowed_uids (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:893
+msgid ""
+"Specifies the comma-separated list of UID values or user names that are "
+"allowed to access the PAC responder. User names are resolved to UIDs at "
+"startup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:899
+msgid "Default: 0 (only the root user is allowed to access the PAC responder)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:903
+msgid ""
+"Please note that although the UID 0 is used as the default it will be "
+"overwritten with this option. If you still want to allow the root user to "
+"access the PAC responder, which would be the typical case, you have to add 0 "
+"to the list of allowed UIDs as well."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:917
+msgid "DOMAIN SECTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:924
+msgid "min_id,max_id (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:927
+msgid ""
+"UID and GID limits for the domain. If a domain contains an entry that is "
+"outside these limits, it is ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:932
+msgid ""
+"For users, this affects the primary GID limit. The user will not be returned "
+"to NSS if either the UID or the primary GID is outside the range. For non-"
+"primary group memberships, those that are in range will be reported as "
+"expected."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:939
+msgid ""
+"These ID limits affect even saving entries to cache, not only returning them "
+"by name or ID."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:943
+msgid "Default: 1 for min_id, 0 (no limit) for max_id"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:949
+msgid "enumerate (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:952
+msgid ""
+"Determines if a domain can be enumerated. This parameter can have one of the "
+"following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:956
+msgid "TRUE = Users and groups are enumerated"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:959
+msgid "FALSE = No enumerations for this domain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:962 sssd.conf.5.xml:1136 sssd.conf.5.xml:1238
+#: sssd.conf.5.xml:1255
+msgid "Default: FALSE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:965
+msgid ""
+"Note: Enabling enumeration has a moderate performance impact on SSSD while "
+"enumeration is running. It may take up to several minutes after SSSD startup "
+"to fully complete enumerations. During this time, individual requests for "
+"information will go directly to LDAP, though it may be slow, due to the "
+"heavy enumeration processing. Saving a large number of entries to cache "
+"after the enumeration completes might also be CPU intensive as the "
+"memberships have to be recomputed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:978
+msgid ""
+"While the first enumeration is running, requests for the complete user or "
+"group lists may return no results until it completes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:983
+msgid ""
+"Further, enabling enumeration may increase the time necessary to detect "
+"network disconnection, as longer timeouts are required to ensure that "
+"enumeration lookups are completed successfully. For more information, refer "
+"to the man pages for the specific id_provider in use."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:991
+msgid ""
+"For the reasons cited above, enabling enumeration is not recommended, "
+"especially in large environments."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1015
+msgid "entry_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1018
+msgid ""
+"How many seconds should nss_sss consider entries valid before asking the "
+"backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1022
+msgid "Default: 5400"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1028
+msgid "entry_cache_user_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1031
+msgid ""
+"How many seconds should nss_sss consider user entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1035 sssd.conf.5.xml:1048 sssd.conf.5.xml:1061
+#: sssd.conf.5.xml:1074 sssd.conf.5.xml:1087 sssd.conf.5.xml:1101
+msgid "Default: entry_cache_timeout"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1041
+msgid "entry_cache_group_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1044
+msgid ""
+"How many seconds should nss_sss consider group entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1054
+msgid "entry_cache_netgroup_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1057
+msgid ""
+"How many seconds should nss_sss consider netgroup entries valid before "
+"asking the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1067
+msgid "entry_cache_service_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1070
+msgid ""
+"How many seconds should nss_sss consider service entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1080
+msgid "entry_cache_sudo_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1083
+msgid ""
+"How many seconds should sudo consider rules valid before asking the backend "
+"again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1093
+msgid "entry_cache_autofs_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1096
+msgid ""
+"How many seconds should the autofs service consider automounter maps valid "
+"before asking the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1107
+msgid "refresh_expired_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1110
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing expired "
+"records. Currently only refreshing expired netgroups is supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1115
+msgid "You can consider setting this value to 3/4 * entry_cache_timeout."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1119
+msgid "Default: 0 (disabled)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1125
+msgid "cache_credentials (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1128
+msgid "Determines if user credentials are also cached in the local LDB cache"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1132
+msgid "User credentials are stored in a SHA512 hash, not in plaintext"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1141
+msgid "account_cache_expiration (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1144
+msgid ""
+"Number of days entries are left in cache after last successful login before "
+"being removed during a cleanup of the cache. 0 means keep forever. The "
+"value of this parameter must be greater than or equal to "
+"offline_credentials_expiration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1151
+msgid "Default: 0 (unlimited)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1156
+msgid "pwd_expiration_warning (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1167
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning. Also an auth provider has to be configured for the "
+"backend."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1174
+msgid "Default: 7 (Kerberos), 0 (LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1180
+msgid "id_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1183
+msgid ""
+"The identification provider used for the domain. Supported ID providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1187
+msgid "proxy: Support a legacy NSS provider"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1190
+msgid "<quote>local</quote>: SSSD internal provider for local users"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1194
+msgid ""
+"<quote>ldap</quote>: LDAP provider. See <citerefentry> <refentrytitle>sssd-"
+"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more "
+"information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1202 sssd.conf.5.xml:1281 sssd.conf.5.xml:1332
+#: sssd.conf.5.xml:1385
+msgid ""
+"<quote>ipa</quote>: FreeIPA and Red Hat Enterprise Identity Management "
+"provider. See <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
+"FreeIPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1290 sssd.conf.5.xml:1341
+#: sssd.conf.5.xml:1394
+msgid ""
+"<quote>ad</quote>: Active Directory provider. See <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Active Directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1222
+msgid "use_fully_qualified_names (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1225
+msgid ""
+"Use the full name and domain (as formatted by the domain's full_name_format) "
+"as the user's login name reported to NSS."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1230
+msgid ""
+"If set to TRUE, all requests to this domain must use fully qualified names. "
+"For example, if used in LOCAL domain that contains a \"test\" user, "
+"<command>getent passwd test</command> wouldn't find the user while "
+"<command>getent passwd test@LOCAL</command> would."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1243
+msgid "ignore_group_members (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1246
+msgid "Do not return group members for group lookups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1249
+msgid ""
+"If set to TRUE, the group membership attribute is not requested from the "
+"ldap server, and group members are not returned when processing group lookup "
+"calls."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1260
+msgid "auth_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1263
+msgid ""
+"The authentication provider used for the domain. Supported auth providers "
+"are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1267 sssd.conf.5.xml:1325
+msgid ""
+"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1274
+msgid ""
+"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1298
+msgid ""
+"<quote>proxy</quote> for relaying authentication to some other PAM target."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1301
+msgid "<quote>none</quote> disables authentication explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1304
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"authentication requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1310
+msgid "access_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1313
+msgid ""
+"The access control provider used for the domain. There are two built-in "
+"access providers (in addition to any included in installed backends) "
+"Internal special providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1319
+msgid ""
+"<quote>permit</quote> always allow access. It's the only permitted access "
+"provider for a local domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1322
+msgid "<quote>deny</quote> always deny access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1349
+msgid ""
+"<quote>simple</quote> access control based on access or deny lists. See "
+"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry> for more information on configuring the simple "
+"access module."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1356
+msgid "Default: <quote>permit</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1361
+msgid "chpass_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1364
+msgid ""
+"The provider which should handle change password operations for the domain. "
+"Supported change password providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1369
+msgid ""
+"<quote>ldap</quote> to change a password stored in a LDAP server. See "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1377
+msgid ""
+"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1402
+msgid ""
+"<quote>proxy</quote> for relaying password changes to some other PAM target."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1406
+msgid "<quote>none</quote> disallows password changes explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1409
+msgid ""
+"Default: <quote>auth_provider</quote> is used if it is set and can handle "
+"change password requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1416
+msgid "sudo_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1419
+msgid "The SUDO provider used for the domain. Supported SUDO providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1423
+msgid ""
+"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1430
+msgid "<quote>none</quote> disables SUDO explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1433 sssd.conf.5.xml:1487 sssd.conf.5.xml:1519
+#: sssd.conf.5.xml:1544
+msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1439
+msgid "selinux_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1442
+msgid ""
+"The provider which should handle loading of selinux settings. Note that this "
+"provider will be called right after access provider ends. Supported selinux "
+"providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1448
+msgid ""
+"<quote>ipa</quote> to load selinux settings from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1456
+msgid "<quote>none</quote> disallows fetching selinux settings explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1459
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"selinux loading requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1465
+msgid "subdomains_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1468
+msgid ""
+"The provider which should handle fetching of subdomains. This value should "
+"be always the same as id_provider. Supported subdomain providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1474
+msgid ""
+"<quote>ipa</quote> to load a list of subdomains from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1483
+msgid "<quote>none</quote> disallows fetching subdomains explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1494
+msgid "autofs_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1497
+msgid ""
+"The autofs provider used for the domain. Supported autofs providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1501
+msgid ""
+"<quote>ldap</quote> to load maps stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1508
+msgid ""
+"<quote>ipa</quote> to load maps stored in an IPA server. See <citerefentry> "
+"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1516
+msgid "<quote>none</quote> disables autofs explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1526
+msgid "hostid_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1529
+msgid ""
+"The provider used for retrieving host identity information. Supported "
+"hostid providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1533
+msgid ""
+"<quote>ipa</quote> to load host identity stored in an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1541
+msgid "<quote>none</quote> disables hostid explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1554
+msgid ""
+"Regular expression for this domain that describes how to parse the string "
+"containing user name and domain into these components."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1559
+msgid ""
+"Default for the AD and IPA provider: <quote>(((?P&lt;domain&gt;[^\\\\]+)\\"
+"\\(?P&lt;name&gt;.+$))|((?P&lt;name&gt;[^@]+)@(?P&lt;domain&gt;.+$))|(^(?"
+"P&lt;name&gt;[^@\\\\]+)$))</quote> which allows three different styles for "
+"user names:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1564
+msgid "username"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1567
+msgid "username@domain.name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1570
+msgid "domain\\username"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1573
+msgid ""
+"While the first two correspond to the general default the third one is "
+"introduced to allow easy integration of users from Windows domains."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1578
+msgid ""
+"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
+"which translates to \"the name is everything up to the <quote>@</quote> "
+"sign, the domain everything after that\""
+msgstr ""
+"Padrão: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> pode "
+"ser traduzido como \"o nome de é a parte antes do sinal <quote>@</quote> , e "
+"o domínio é todo o restante\""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1584
+msgid ""
+"PLEASE NOTE: the support for non-unique named subpatterns is not available "
+"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
+"version 7 or higher can support non-unique named subpatterns."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1591
+msgid ""
+"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
+"P&lt;name&gt;) to label subpatterns."
+msgstr ""
+"OBSERVE TAMBÉM: Versões antigas do libpcre suportam somente a sintaxe (?P&lt;"
+"name&gt;) para rótulos de padrões secindários"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1601
+msgid ""
+"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+"manvolnum> </citerefentry>-compatible format that describes how to translate "
+"a (name, domain) tuple for this domain into a fully qualified name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1609
+msgid "Default: <quote>%1$s@%2$s</quote>."
+msgstr "Padrão: <quote>%1$s@%2$s</quote>."
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1615
+msgid "lookup_family_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1618
+msgid ""
+"Provides the ability to select preferred address family to use when "
+"performing DNS lookups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1622
+msgid "Supported values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1625
+msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1628
+msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1631
+msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1634
+msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1637
+msgid "Default: ipv4_first"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1643
+msgid "dns_resolver_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1646
+msgid ""
+"Defines the amount of time (in seconds) to wait for a reply from the DNS "
+"resolver before assuming that it is unreachable. If this timeout is reached, "
+"the domain will continue to operate in offline mode."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1652 sssd-ldap.5.xml:1083 sssd-ldap.5.xml:1125
+#: sssd-ldap.5.xml:1140
+msgid "Default: 6"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1658
+msgid "dns_discovery_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1661
+msgid ""
+"If service discovery is used in the back end, specifies the domain part of "
+"the service discovery DNS query."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1665
+msgid "Default: Use the domain part of machine's hostname"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1671
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1674
+msgid "Override the primary GID value with the one specified."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1680
+msgid "case_sensitive (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1683
+msgid ""
+"Treat user and group names as case sensitive. At the moment, this option is "
+"not supported in the local provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1688
+msgid "Default: True"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1694
+msgid "proxy_fast_alias (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1697
+msgid ""
+"When a user or group is looked up by name in the proxy provider, a second "
+"lookup by ID is performed to \"canonicalize\" the name in case the requested "
+"name was an alias. Setting this option to true would cause the SSSD to "
+"perform the ID lookup from cache for performance reasons."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1711
+msgid "subdomain_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1714
+msgid ""
+"Use this homedir as default value for all subdomains within this domain. See "
+"<emphasis>override_homedir</emphasis> for info about possible values."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1719
+msgid ""
+"The value can be overridden by <emphasis>override_homedir</emphasis> option."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1723
+msgid "Default: <filename>/home/%d/%u</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:919
+msgid ""
+"These configuration options can be present in a domain configuration "
+"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
+"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1735
+msgid "proxy_pam_target (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1738
+msgid "The proxy target PAM proxies to."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1741
+msgid ""
+"Default: not set by default, you have to take an existing pam configuration "
+"or create a new one and add the service name here."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1749
+msgid "proxy_lib_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1752
+msgid ""
+"The name of the NSS library to use in proxy domains. The NSS functions "
+"searched for in the library are in the form of _nss_$(libName)_$(function), "
+"for example _nss_files_getpwent."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1731
+msgid ""
+"Options valid for proxy domains. <placeholder type=\"variablelist\" id="
+"\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:1764
+msgid "The local domain section"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:1766
+msgid ""
+"This section contains settings for domain that stores users and groups in "
+"SSSD native database, that is, a domain that uses "
+"<replaceable>id_provider=local</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1773
+msgid "default_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1776
+msgid "The default shell for users created with SSSD userspace tools."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1780
+msgid "Default: <filename>/bin/bash</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1785
+msgid "base_directory (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1788
+msgid ""
+"The tools append the login name to <replaceable>base_directory</replaceable> "
+"and use that as the home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1793
+msgid "Default: <filename>/home</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1798
+msgid "create_homedir (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1801
+msgid ""
+"Indicate if a home directory should be created by default for new users. "
+"Can be overridden on command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1805 sssd.conf.5.xml:1817
+msgid "Default: TRUE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1810
+msgid "remove_homedir (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1813
+msgid ""
+"Indicate if a home directory should be removed by default for deleted "
+"users. Can be overridden on command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1822
+msgid "homedir_umask (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1825
+msgid ""
+"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
+"on a newly created home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1833
+msgid "Default: 077"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1838
+msgid "skel_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1841
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1851
+msgid "Default: <filename>/etc/skel</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1856
+msgid "mail_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1859
+msgid ""
+"The mail spool directory. This is needed to manipulate the mailbox when its "
+"corresponding user account is modified or deleted. If not specified, a "
+"default value is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1866
+msgid "Default: <filename>/var/mail</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1871
+msgid "userdel_cmd (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1874
+msgid ""
+"The command that is run after a user is removed. The command us passed the "
+"username of the user being removed as the first and only parameter. The "
+"return code of the command is not taken into account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1880
+msgid "Default: None, no command is run"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:1890 sssd-ldap.5.xml:2329 sssd-simple.5.xml:131
+#: sssd-ipa.5.xml:612 sssd-ad.5.xml:229 sssd-krb5.5.xml:441
+msgid "EXAMPLE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:1896
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"domains = LDAP\n"
+"services = nss, pam\n"
+"config_file_version = 2\n"
+"\n"
+"[nss]\n"
+"filter_groups = root\n"
+"filter_users = root\n"
+"\n"
+"[pam]\n"
+"\n"
+"[domain/LDAP]\n"
+"id_provider = ldap\n"
+"ldap_uri = ldap://ldap.example.com\n"
+"ldap_search_base = dc=example,dc=com\n"
+"\n"
+"auth_provider = krb5\n"
+"krb5_server = kerberos.example.com\n"
+"krb5_realm = EXAMPLE.COM\n"
+"cache_credentials = true\n"
+"\n"
+"min_id = 10000\n"
+"max_id = 20000\n"
+"enumerate = False\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1892
+msgid ""
+"The following example shows a typical SSSD config. It does not describe "
+"configuration of the domains themselves - refer to documentation on "
+"configuring domains for more details. <placeholder type=\"programlisting\" "
+"id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
+msgid "sssd-ldap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:23
+msgid ""
+"This manual page describes the configuration of LDAP domains for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Refer to the <quote>FILE FORMAT</quote> section of the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for detailed syntax information."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:35
+msgid "You can configure SSSD to use more than one LDAP domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:38
+msgid ""
+"LDAP back end supports id, auth, access and chpass providers. If you want to "
+"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
+"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
+"over an unencrypted channel. If the LDAP server is used only as an identity "
+"provider, an encrypted channel is not needed. Please refer to "
+"<quote>ldap_access_filter</quote> config option for more information about "
+"using LDAP as an access provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:70 sssd-ad.5.xml:75
+#: sssd-krb5.5.xml:63
+msgid "CONFIGURATION OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:60
+msgid "ldap_uri, ldap_backup_uri (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:63
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference. Refer to the <quote>FAILOVER</"
+"quote> section for more information on failover and server redundancy. If "
+"neither option is specified, service discovery is enabled. For more "
+"information, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:70
+msgid "The format of the URI must match the format defined in RFC 2732:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:73
+msgid "ldap[s]://&lt;host&gt;[:port]"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:76
+msgid ""
+"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:79
+msgid "example: ldap://[fc00::126:25]:389"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:85
+msgid "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:88
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference to change the password of a user. "
+"Refer to the <quote>FAILOVER</quote> section for more information on "
+"failover and server redundancy."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:95
+msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:99
+msgid "Default: empty, i.e. ldap_uri is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:105
+msgid "ldap_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:108
+msgid "The default base DN to use for performing LDAP user operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:112
+msgid ""
+"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
+"syntax:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:116
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:119
+msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:122
+msgid ""
+"The filter must be a valid LDAP search filter as specified by http://www."
+"ietf.org/rfc/rfc2254.txt"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:126
+msgid "Examples:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:129
+msgid ""
+"ldap_search_base = dc=example,dc=com (which is equivalent to) "
+"ldap_search_base = dc=example,dc=com?subtree?"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:134
+msgid ""
+"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
+"(host=thishost)?dc=example.com?subtree?"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:137
+msgid ""
+"Note: It is unsupported to have multiple search bases which reference "
+"identically-named objects (for example, groups with the same name in two "
+"different search bases). This will lead to unpredictable behavior on client "
+"machines."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:144
+msgid ""
+"Default: If not set, the value of the defaultNamingContext or namingContexts "
+"attribute from the RootDSE of the LDAP server is used. If "
+"defaultNamingContext does not exist or has an empty value namingContexts is "
+"used. The namingContexts attribute must have a single value with the DN of "
+"the search base of the LDAP server to make this work. Multiple values are "
+"are not supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:158
+msgid "ldap_schema (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:161
+msgid ""
+"Specifies the Schema Type in use on the target LDAP server. Depending on "
+"the selected schema, the default attribute names retrieved from the servers "
+"may vary. The way that some attributes are handled may also differ."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:168
+msgid "Four schema types are currently supported:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:172
+msgid "rfc2307"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:177
+msgid "rfc2307bis"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:182
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:187
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:193
+msgid ""
+"The main difference between these schema types is how group memberships are "
+"recorded in the server. With rfc2307, group members are listed by name in "
+"the <emphasis>memberUid</emphasis> attribute. With rfc2307bis and IPA, "
+"group members are listed by DN and stored in the <emphasis>member</emphasis> "
+"attribute. The AD schema type sets the attributes to correspond with Active "
+"Directory 2008r2 values."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:203
+msgid "Default: rfc2307"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:209
+msgid "ldap_default_bind_dn (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:212
+msgid "The default bind DN to use for performing LDAP operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:219
+msgid "ldap_default_authtok_type (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:222
+msgid "The type of the authentication token of the default bind DN."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:226
+msgid "The two mechanisms currently supported are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:229
+msgid "password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:232
+msgid "obfuscated_password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:235
+msgid "Default: password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:241
+msgid "ldap_default_authtok (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:244
+msgid ""
+"The authentication token of the default bind DN. Only clear text passwords "
+"are currently supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:251
+msgid "ldap_user_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:254
+msgid "The object class of a user entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:257
+msgid "Default: posixAccount"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:263
+msgid "ldap_user_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:266
+msgid "The LDAP attribute that corresponds to the user's login name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:270
+msgid "Default: uid"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:276
+msgid "ldap_user_uid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:279
+msgid "The LDAP attribute that corresponds to the user's id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:283
+msgid "Default: uidNumber"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:289
+msgid "ldap_user_gid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:292
+msgid "The LDAP attribute that corresponds to the user's primary group id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:296 sssd-ldap.5.xml:778
+msgid "Default: gidNumber"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:302
+msgid "ldap_user_gecos (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:305
+msgid "The LDAP attribute that corresponds to the user's gecos field."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:309
+msgid "Default: gecos"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:315
+msgid "ldap_user_home_directory (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:318
+msgid "The LDAP attribute that contains the name of the user's home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:322
+msgid "Default: homeDirectory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:328
+msgid "ldap_user_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:331
+msgid "The LDAP attribute that contains the path to the user's default shell."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:335
+msgid "Default: loginShell"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:341
+msgid "ldap_user_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:344
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:348 sssd-ldap.5.xml:804 sssd-ldap.5.xml:990
+msgid "Default: nsUniqueId"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:354
+msgid "ldap_user_objectsid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:357
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP user object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:362 sssd-ldap.5.xml:818
+msgid "Default: objectSid for ActiveDirectory, not set for other servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:369
+msgid "ldap_user_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:372 sssd-ldap.5.xml:828 sssd-ldap.5.xml:999
+msgid ""
+"The LDAP attribute that contains timestamp of the last modification of the "
+"parent object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:376 sssd-ldap.5.xml:832 sssd-ldap.5.xml:1006
+msgid "Default: modifyTimestamp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:382
+msgid "ldap_user_shadow_last_change (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:385
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
+"the last password change)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:395
+msgid "Default: shadowLastChange"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:401
+msgid "ldap_user_shadow_min (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:404
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
+"password age)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:413
+msgid "Default: shadowMin"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:419
+msgid "ldap_user_shadow_max (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:422
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
+"password age)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:431
+msgid "Default: shadowMax"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:437
+msgid "ldap_user_shadow_warning (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:440
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password warning period)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:450
+msgid "Default: shadowWarning"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:456
+msgid "ldap_user_shadow_inactive (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:459
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password inactivity period)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:469
+msgid "Default: shadowInactive"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:475
+msgid "ldap_user_shadow_expire (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:478
+msgid ""
+"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
+"parameter contains the name of an LDAP attribute corresponding to its "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> counterpart (account expiration date)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:488
+msgid "Default: shadowExpire"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:494
+msgid "ldap_user_krb_last_pwd_change (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:497
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time of last password change in "
+"kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:503
+msgid "Default: krbLastPwdChange"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:509
+msgid "ldap_user_krb_password_expiration (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:512
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time when current password expires."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:518
+msgid "Default: krbPasswordExpiration"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:524
+msgid "ldap_user_ad_account_expires (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:527
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the expiration time of the account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:532
+msgid "Default: accountExpires"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:538
+msgid "ldap_user_ad_user_account_control (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:541
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the user account control bit field."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:546
+msgid "Default: userAccountControl"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:552
+msgid "ldap_ns_account_lock (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:555
+msgid ""
+"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
+"determines if access is allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:560
+msgid "Default: nsAccountLock"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:566
+msgid "ldap_user_nds_login_disabled (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:569
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines if "
+"access is allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:573 sssd-ldap.5.xml:587
+msgid "Default: loginDisabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:579
+msgid "ldap_user_nds_login_expiration_time (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:582
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines until "
+"which date access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:593
+msgid "ldap_user_nds_login_allowed_time_map (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:596
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines the "
+"hours of a day in a week when access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:601
+msgid "Default: loginAllowedTimeMap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:607
+msgid "ldap_user_principal (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:610
+msgid ""
+"The LDAP attribute that contains the user's Kerberos User Principal Name "
+"(UPN)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:614
+msgid "Default: krbPrincipalName"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:620
+msgid "ldap_user_ssh_public_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:623
+msgid "The LDAP attribute that contains the user's SSH public keys."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:630
+msgid "ldap_force_upper_case_realm (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:633
+msgid ""
+"Some directory servers, for example Active Directory, might deliver the "
+"realm part of the UPN in lower case, which might cause the authentication to "
+"fail. Set this option to a non-zero value if you want to use an upper-case "
+"realm."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:646
+msgid "ldap_enumeration_refresh_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:649
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing its cache of "
+"enumerated records."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:660
+msgid "ldap_purge_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:663
+msgid ""
+"Determine how often to check the cache for inactive entries (such as groups "
+"with no members and users who have never logged in) and remove them to save "
+"space."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:669
+msgid "Setting this option to zero will disable the cache cleanup operation."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:673
+msgid "Default: 10800 (12 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:679
+msgid "ldap_user_fullname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:682
+msgid "The LDAP attribute that corresponds to the user's full name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:686 sssd-ldap.5.xml:765 sssd-ldap.5.xml:940
+#: sssd-ldap.5.xml:1031 sssd-ldap.5.xml:1893 sssd-ldap.5.xml:2219
+#: sssd-ipa.5.xml:467
+msgid "Default: cn"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:692
+msgid "ldap_user_member_of (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:695
+msgid "The LDAP attribute that lists the user's group memberships."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:699 sssd-ipa.5.xml:371
+msgid "Default: memberOf"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:705
+msgid "ldap_user_authorized_service (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:708
+msgid ""
+"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
+"use the presence of the authorizedService attribute in the user's LDAP entry "
+"to determine access privilege."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:715
+msgid ""
+"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
+"explicit allow (svc) and finally for allow_all (*)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:720
+msgid "Default: authorizedService"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:726
+msgid "ldap_user_authorized_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:729
+msgid ""
+"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
+"presence of the host attribute in the user's LDAP entry to determine access "
+"privilege."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:735
+msgid ""
+"An explicit deny (!host) is resolved first. Second, SSSD searches for "
+"explicit allow (host) and finally for allow_all (*)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:740
+msgid "Default: host"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:746
+msgid "ldap_group_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:749
+msgid "The object class of a group entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:752
+msgid "Default: posixGroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:758
+msgid "ldap_group_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:761
+msgid "The LDAP attribute that corresponds to the group name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:771
+msgid "ldap_group_gid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:774
+msgid "The LDAP attribute that corresponds to the group's id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:784
+msgid "ldap_group_member (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:787
+msgid "The LDAP attribute that contains the names of the group's members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:791
+msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:797
+msgid "ldap_group_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:800
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:810
+msgid "ldap_group_objectsid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:813
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP group object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:825
+msgid "ldap_group_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:838
+msgid "ldap_group_nesting_level (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:841
+msgid ""
+"If ldap_schema is set to a schema format that supports nested groups (e.g. "
+"RFC2307bis), then this option controls how many levels of nesting SSSD will "
+"follow. This option has no effect on the RFC2307 schema."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:848
+msgid "Default: 2"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:854
+msgid "ldap_groups_use_matching_rule_in_chain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:857
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which may speed up group lookup operations on deployments with "
+"complex or deep nested groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:863
+msgid ""
+"In most common cases, it is best to leave this option disabled. It generally "
+"only provides a performance increase on very complex nestings."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:868 sssd-ldap.5.xml:895
+msgid ""
+"If this option is enabled, SSSD will use it if it detects that the server "
+"supports it during initial connection. So \"True\" here essentially means "
+"\"auto-detect\"."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:874 sssd-ldap.5.xml:901
+msgid ""
+"Note: This feature is currently known to work only with Active Directory "
+"2008 R1 and later. See <ulink url=\"http://msdn.microsoft.com/en-us/library/"
+"windows/desktop/aa746475%28v=vs.85%29.aspx\"> MSDN(TM) documentation</ulink> "
+"for more details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:880 sssd-ldap.5.xml:907 sssd-ldap.5.xml:1198
+#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1671 include/ldap_id_mapping.xml:184
+msgid "Default: False"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:886
+msgid "ldap_initgroups_use_matching_rule_in_chain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:889
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which might speed up initgroups operations (most notably when "
+"dealing with complex or deep nested groups)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:913
+msgid "ldap_netgroup_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:916
+msgid "The object class of a netgroup entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:919
+msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:923
+msgid "Default: nisNetgroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:929
+msgid "ldap_netgroup_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:932
+msgid "The LDAP attribute that corresponds to the netgroup name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:936
+msgid "In IPA provider, ipa_netgroup_name should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:946
+msgid "ldap_netgroup_member (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:949
+msgid "The LDAP attribute that contains the names of the netgroup's members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:953
+msgid "In IPA provider, ipa_netgroup_member should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:957
+msgid "Default: memberNisNetgroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:963
+msgid "ldap_netgroup_triple (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:966
+msgid ""
+"The LDAP attribute that contains the (host, user, domain) netgroup triples."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:970 sssd-ldap.5.xml:1003
+msgid "This option is not available in IPA provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:973
+msgid "Default: nisNetgroupTriple"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:979
+msgid "ldap_netgroup_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:982
+msgid ""
+"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:986
+msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:996
+msgid "ldap_netgroup_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1012
+msgid "ldap_service_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1015
+msgid "The object class of a service entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1018
+msgid "Default: ipService"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1024
+msgid "ldap_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1027
+msgid ""
+"The LDAP attribute that contains the name of service attributes and their "
+"aliases."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1037
+msgid "ldap_service_port (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1040
+msgid "The LDAP attribute that contains the port managed by this service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1044
+msgid "Default: ipServicePort"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1050
+msgid "ldap_service_proto (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1053
+msgid ""
+"The LDAP attribute that contains the protocols understood by this service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1057
+msgid "Default: ipServiceProtocol"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1063
+msgid "ldap_service_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1068
+msgid "ldap_search_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1071
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches are allowed to run "
+"before they are cancelled and cached results are returned (and offline mode "
+"is entered)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1077
+msgid ""
+"Note: this option is subject to change in future versions of the SSSD. It "
+"will likely be replaced at some point by a series of timeouts for specific "
+"lookup types."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1089
+msgid "ldap_enumeration_search_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1092
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches for user and group "
+"enumerations are allowed to run before they are cancelled and cached results "
+"are returned (and offline mode is entered)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1105
+msgid "ldap_network_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1108
+msgid ""
+"Specifies the timeout (in seconds) after which the <citerefentry> "
+"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
+"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
+"manvolnum> </citerefentry> following a <citerefentry> "
+"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
+"citerefentry> returns in case of no activity."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1131
+msgid "ldap_opt_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1134
+msgid ""
+"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
+"will abort if no response is received. Also controls the timeout when "
+"communicating with the KDC in case of SASL bind."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1146
+msgid "ldap_connection_expire_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1149
+msgid ""
+"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
+"maintained. After this time, the connection will be re-established. If used "
+"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
+"the TGT lifetime) will be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1157 sssd-ldap.5.xml:2050
+msgid "Default: 900 (15 minutes)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1163
+msgid "ldap_page_size (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1166
+msgid ""
+"Specify the number of records to retrieve from LDAP in a single request. "
+"Some LDAP servers enforce a maximum limit per-request."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1171
+msgid "Default: 1000"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1177
+msgid "ldap_disable_paging (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1180
+msgid ""
+"Disable the LDAP paging control. This option should be used if the LDAP "
+"server reports that it supports the LDAP paging control in its RootDSE but "
+"it is not enabled or does not behave properly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1186
+msgid ""
+"Example: OpenLDAP servers with the paging control module installed on the "
+"server but not enabled will report it in the RootDSE but be unable to use it."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1192
+msgid ""
+"Example: 389 DS has a bug where it can only support a one paging control at "
+"a time on a single connection. On busy clients, this can result in some "
+"requests being denied."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1204
+msgid "ldap_disable_range_retrieval (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1207
+msgid "Disable Active Directory range retrieval."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1210
+msgid ""
+"Active Directory limits the number of members to be retrieved in a single "
+"lookup using the MaxValRange policy (which defaults to 1500 members). If a "
+"group contains more members, the reply would include an AD-specific range "
+"extension. This option disables parsing of the range extension, therefore "
+"large groups will appear as having no members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1225
+msgid "ldap_sasl_minssf (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1228
+msgid ""
+"When communicating with an LDAP server using SASL, specify the minimum "
+"security level necessary to establish the connection. The values of this "
+"option are defined by OpenLDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1234
+msgid "Default: Use the system default (usually specified by ldap.conf)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1241
+msgid "ldap_deref_threshold (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1244
+msgid ""
+"Specify the number of group members that must be missing from the internal "
+"cache in order to trigger a dereference lookup. If less members are missing, "
+"they are looked up individually."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1250
+msgid ""
+"You can turn off dereference lookups completely by setting the value to 0."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1254
+msgid ""
+"A dereference lookup is a means of fetching all group members in a single "
+"LDAP call. Different LDAP servers may implement different dereference "
+"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
+"Directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1262
+msgid ""
+"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
+"filter, then the dereference lookup performance enhancement will be disabled "
+"regardless of this setting."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1275
+msgid "ldap_tls_reqcert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1278
+msgid ""
+"Specifies what checks to perform on server certificates in a TLS session, if "
+"any. It can be specified as one of the following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1284
+msgid ""
+"<emphasis>never</emphasis> = The client will not request or check any server "
+"certificate."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1288
+msgid ""
+"<emphasis>allow</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, it will be ignored and the session proceeds normally."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1295
+msgid ""
+"<emphasis>try</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, the session is immediately terminated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1301
+msgid ""
+"<emphasis>demand</emphasis> = The server certificate is requested. If no "
+"certificate is provided, or a bad certificate is provided, the session is "
+"immediately terminated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1307
+msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1311
+msgid "Default: hard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1317
+msgid "ldap_tls_cacert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1320
+msgid ""
+"Specifies the file that contains certificates for all of the Certificate "
+"Authorities that <command>sssd</command> will recognize."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1325 sssd-ldap.5.xml:1343 sssd-ldap.5.xml:1384
+msgid ""
+"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
+"conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1332
+msgid "ldap_tls_cacertdir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1335
+msgid ""
+"Specifies the path of a directory that contains Certificate Authority "
+"certificates in separate individual files. Typically the file names need to "
+"be the hash of the certificate followed by '.0'. If available, "
+"<command>cacertdir_rehash</command> can be used to create the correct names."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1350
+msgid "ldap_tls_cert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1353
+msgid "Specifies the file that contains the certificate for the client's key."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1363
+msgid "ldap_tls_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1366
+msgid "Specifies the file that contains the client's key."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1375
+msgid "ldap_tls_cipher_suite (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1378
+msgid ""
+"Specifies acceptable cipher suites. Typically this is a colon sperated "
+"list. See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> for format."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1391
+msgid "ldap_id_use_start_tls (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1394
+msgid ""
+"Specifies that the id_provider connection must also use <systemitem class="
+"\"protocol\">tls</systemitem> to protect the channel."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1404
+msgid "ldap_id_mapping (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1407
+msgid ""
+"Specifies that SSSD should attempt to map user and group IDs from the "
+"ldap_user_objectsid and ldap_group_objectsid attributes instead of relying "
+"on ldap_user_uid_number and ldap_group_gid_number."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1413
+msgid "Currently this feature supports only ActiveDirectory objectSID mapping."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1423
+msgid "ldap_sasl_mech (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1426
+msgid ""
+"Specify the SASL mechanism to use. Currently only GSSAPI is tested and "
+"supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1436
+msgid "ldap_sasl_authid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1439
+msgid ""
+"Specify the SASL authorization id to use. When GSSAPI is used, this "
+"represents the Kerberos principal used for authentication to the directory. "
+"This option can either contain the full principal (for example host/"
+"myhost@EXAMPLE.COM) or just the principal name (for example host/myhost)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1447
+msgid "Default: host/hostname@REALM"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1453
+msgid "ldap_sasl_realm (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1456
+msgid ""
+"Specify the SASL realm to use. When not specified, this option defaults to "
+"the value of krb5_realm. If the ldap_sasl_authid contains the realm as "
+"well, this option is ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1462
+msgid "Default: the value of krb5_realm."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1468
+msgid "ldap_sasl_canonicalize (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1471
+msgid ""
+"If set to true, the LDAP library would perform a reverse lookup to "
+"canonicalize the host name during a SASL bind."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1476
+msgid "Default: false;"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1482
+msgid "ldap_krb5_keytab (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1485
+msgid "Specify the keytab to use when using SASL/GSSAPI."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1488
+msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1494
+msgid "ldap_krb5_init_creds (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1497
+msgid ""
+"Specifies that the id_provider should init Kerberos credentials (TGT). This "
+"action is performed only if SASL is used and the mechanism selected is "
+"GSSAPI."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1509
+msgid "ldap_krb5_ticket_lifetime (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1512
+msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1516
+msgid "Default: 86400 (24 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1522 sssd-krb5.5.xml:74
+msgid "krb5_server, krb5_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1525
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled - for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1537 sssd-krb5.5.xml:89
+msgid ""
+"When using service discovery for KDC or kpasswd servers, SSSD first searches "
+"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
+"none are found."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1542 sssd-krb5.5.xml:94
+msgid ""
+"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
+"While the legacy name is recognized for the time being, users are advised to "
+"migrate their config files to use <quote>krb5_server</quote> instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1551 sssd-ipa.5.xml:260 sssd-krb5.5.xml:103
+msgid "krb5_realm (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1554
+msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1557
+msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1563 sssd-ipa.5.xml:275 sssd-krb5.5.xml:418
+msgid "krb5_canonicalize (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1566
+msgid ""
+"Specifies if the host principal should be canonicalized when connecting to "
+"LDAP server. This feature is available with MIT Kerberos >= 1.7"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1578
+msgid "ldap_pwd_policy (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1581
+msgid ""
+"Select the policy to evaluate the password expiration on the client side. "
+"The following values are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1586
+msgid ""
+"<emphasis>none</emphasis> - No evaluation on the client side. This option "
+"cannot disable server-side password policies."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1591
+msgid ""
+"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
+"evaluate if the password has expired."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1597
+msgid ""
+"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
+"to determine if the password has expired. Use chpass_provider=krb5 to update "
+"these attributes when the password is changed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1603
+msgid "Default: none"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1609
+msgid "ldap_referrals (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1612
+msgid "Specifies whether automatic referral chasing should be enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1616
+msgid ""
+"Please note that sssd only supports referral chasing when it is compiled "
+"with OpenLDAP version 2.4.13 or higher."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1621
+msgid ""
+"Chasing referrals may incur a performance penalty in environments that use "
+"them heavily, a notable example is Microsoft Active Directory. If your setup "
+"does not in fact require the use of referrals, setting this option to false "
+"might bring a noticeable performance improvement."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1635
+msgid "ldap_dns_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1638
+msgid "Specifies the service name to use when service discovery is enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1642
+msgid "Default: ldap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1648
+msgid "ldap_chpass_dns_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1651
+msgid ""
+"Specifies the service name to use to find an LDAP server which allows "
+"password changes when service discovery is enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1656
+msgid "Default: not set, i.e. service discovery is disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1662
+msgid "ldap_chpass_update_last_change (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1665
+msgid ""
+"Specifies whether to update the ldap_user_shadow_last_change attribute with "
+"days since the Epoch after a password change operation."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1677
+msgid "ldap_access_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1680
+msgid ""
+"If using access_provider = ldap and ldap_access_order = filter (default), "
+"this option is mandatory. It specifies an LDAP search filter criteria that "
+"must be met for the user to be granted access on this host. If "
+"access_provider = ldap, ldap_access_order = filter and this option is not "
+"set, it will result in all users being denied access. Use access_provider = "
+"permit to change this default behavior."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
+msgid "Example:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:1695
+#, no-wrap
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1699
+msgid ""
+"This example means that access to this host is restricted to members of the "
+"\"allowedusers\" group in ldap."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1704
+msgid ""
+"Offline caching for this feature is limited to determining whether the "
+"user's last online login was granted access permission. If they were granted "
+"access during their last login, they will continue to be granted access "
+"while offline and vice-versa."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1712 sssd-ldap.5.xml:1762
+msgid "Default: Empty"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1718
+msgid "ldap_account_expire_policy (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1721
+msgid ""
+"With this option a client side evaluation of access control attributes can "
+"be enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1725
+msgid ""
+"Please note that it is always recommended to use server side access control, "
+"i.e. the LDAP server should deny the bind request with a suitable error code "
+"even if the password is correct."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1732
+msgid "The following values are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1735
+msgid ""
+"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
+"determine if the account is expired."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1740
+msgid ""
+"<emphasis>ad</emphasis>: use the value of the 32bit field "
+"ldap_user_ad_user_account_control and allow access if the second bit is not "
+"set. If the attribute is missing access is granted. Also the expiration time "
+"of the account is checked."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1747
+msgid ""
+"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
+"emphasis>: use the value of ldap_ns_account_lock to check if access is "
+"allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1753
+msgid ""
+"<emphasis>nds</emphasis>: the values of "
+"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
+"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
+"If both attributes are missing access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1768
+msgid "ldap_access_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1771
+msgid "Comma separated list of access control options. Allowed values are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1775
+msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1778
+msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1782
+msgid ""
+"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
+"to determine access"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1787
+msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1791
+msgid "Default: filter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1794
+msgid ""
+"Please note that it is a configuration error if a value is used more than "
+"once."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1801
+msgid "ldap_deref (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1804
+msgid ""
+"Specifies how alias dereferencing is done when performing a search. The "
+"following options are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1809
+msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1813
+msgid ""
+"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
+"the base object, but not in locating the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1818
+msgid ""
+"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
+"the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1823
+msgid ""
+"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
+"in locating the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1828
+msgid ""
+"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
+"client libraries)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1836
+msgid "ldap_rfc2307_fallback_to_local_users (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1839
+msgid ""
+"Allows to retain local users as members of an LDAP group for servers that "
+"use the RFC2307 schema."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1843
+msgid ""
+"In some environments where the RFC2307 schema is used, local users are made "
+"members of LDAP groups by adding their names to the memberUid attribute. "
+"The self-consistency of the domain is compromised when this is done, so SSSD "
+"would normally remove the \"missing\" users from the cached group "
+"memberships as soon as nsswitch tries to fetch information about the user "
+"via getpw*() or initgroups() calls."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1854
+msgid ""
+"This option falls back to checking if local users are referenced, and caches "
+"them so that later initgroups() calls will augment the local users with the "
+"additional LDAP groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:51
+msgid ""
+"All of the common configuration options that apply to SSSD domains also "
+"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
+"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for full details. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:1870
+msgid "SUDO OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1874
+msgid "ldap_sudorule_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1877
+msgid "The object class of a sudo rule entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1880
+msgid "Default: sudoRole"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1886
+msgid "ldap_sudorule_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1889
+msgid "The LDAP attribute that corresponds to the sudo rule name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1899
+msgid "ldap_sudorule_command (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1902
+msgid "The LDAP attribute that corresponds to the command name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1906
+msgid "Default: sudoCommand"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1912
+msgid "ldap_sudorule_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1915
+msgid ""
+"The LDAP attribute that corresponds to the host name (or host IP address, "
+"host IP network, or host netgroup)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1920
+msgid "Default: sudoHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1926
+msgid "ldap_sudorule_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1929
+msgid ""
+"The LDAP attribute that corresponds to the user name (or UID, group name or "
+"user's netgroup)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1933
+msgid "Default: sudoUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1939
+msgid "ldap_sudorule_option (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1942
+msgid "The LDAP attribute that corresponds to the sudo options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1946
+msgid "Default: sudoOption"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1952
+msgid "ldap_sudorule_runasuser (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1955
+msgid ""
+"The LDAP attribute that corresponds to the user name that commands may be "
+"run as."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1959
+msgid "Default: sudoRunAsUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1965
+msgid "ldap_sudorule_runasgroup (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1968
+msgid ""
+"The LDAP attribute that corresponds to the group name or group GID that "
+"commands may be run as."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1972
+msgid "Default: sudoRunAsGroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1978
+msgid "ldap_sudorule_notbefore (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1981
+msgid ""
+"The LDAP attribute that corresponds to the start date/time for when the sudo "
+"rule is valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1985
+msgid "Default: sudoNotBefore"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1991
+msgid "ldap_sudorule_notafter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1994
+msgid ""
+"The LDAP attribute that corresponds to the expiration date/time, after which "
+"the sudo rule will no longer be valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1999
+msgid "Default: sudoNotAfter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2005
+msgid "ldap_sudorule_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2008
+msgid "The LDAP attribute that corresponds to the ordering index of the rule."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2012
+msgid "Default: sudoOrder"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2018
+msgid "ldap_sudo_full_refresh_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2021
+msgid ""
+"How many seconds SSSD will wait between executing a full refresh of sudo "
+"rules (which downloads all rules that are stored on the server)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2026
+msgid ""
+"The value must be greater than <emphasis>ldap_sudo_smart_refresh_interval </"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2031
+msgid "Default: 21600 (6 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2037
+msgid "ldap_sudo_smart_refresh_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2040
+msgid ""
+"How many seconds SSSD has to wait before executing a smart refresh of sudo "
+"rules (which downloads all rules that have USN higher than the highest USN "
+"of cached rules)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2046
+msgid ""
+"If USN attributes are not supported by the server, the modifyTimestamp "
+"attribute is used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2056
+msgid "ldap_sudo_use_host_filter (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2059
+msgid ""
+"If true, SSSD will download only rules that are applicable to this machine "
+"(using the IPv4 or IPv6 host/network addresses and hostnames)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2070
+msgid "ldap_sudo_hostnames (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2073
+msgid ""
+"Space separated list of hostnames or fully qualified domain names that "
+"should be used to filter the rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2078
+msgid ""
+"If this option is empty, SSSD will try to discover the hostname and the "
+"fully qualified domain name automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2083 sssd-ldap.5.xml:2106 sssd-ldap.5.xml:2124
+#: sssd-ldap.5.xml:2142
+msgid ""
+"If <emphasis>ldap_sudo_use_host_filter</emphasis> is <emphasis>false</"
+"emphasis> then this option has no effect."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2088 sssd-ldap.5.xml:2111
+msgid "Default: not specified"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2094
+msgid "ldap_sudo_ip (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2097
+msgid ""
+"Space separated list of IPv4 or IPv6 host/network addresses that should be "
+"used to filter the rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2102
+msgid ""
+"If this option is empty, SSSD will try to discover the addresses "
+"automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2117
+msgid "ldap_sudo_include_netgroups (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2120
+msgid ""
+"If true then SSSD will download every rule that contains a netgroup in "
+"sudoHost attribute."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2135
+msgid "ldap_sudo_include_regexp (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2138
+msgid ""
+"If true then SSSD will download every rule that contains a wildcard in "
+"sudoHost attribute."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:1872
+msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2154
+msgid ""
+"This manual page only describes attribute name mapping. For detailed "
+"explanation of sudo related attribute semantics, see <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2164
+msgid "AUTOFS OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2166
+msgid ""
+"Please note that the default values correspond to the default schema which "
+"is RFC2307."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2172
+msgid "ldap_autofs_map_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2175 sssd-ldap.5.xml:2201
+msgid "The object class of an automount map entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2178 sssd-ldap.5.xml:2205
+msgid "Default: automountMap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2185
+msgid "ldap_autofs_map_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2188
+msgid "The name of an automount map entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2191
+msgid "Default: ou"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2198
+msgid "ldap_autofs_entry_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2212
+msgid "ldap_autofs_entry_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2215 sssd-ldap.5.xml:2229
+msgid ""
+"The key of an automount entry in LDAP. The entry usually corresponds to a "
+"mount point."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2226
+msgid "ldap_autofs_entry_value (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2233
+msgid "Default: automountInformation"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2170
+msgid ""
+"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+"\"variablelist\" id=\"4\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2243
+msgid "ADVANCED OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2250
+msgid "ldap_netgroup_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2255
+msgid "ldap_user_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2260
+msgid "ldap_group_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2265
+msgid "ldap_user_search_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2268
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict user searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2272
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_user_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:2282
+#, no-wrap
+msgid ""
+" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2285
+msgid ""
+"This filter would restrict user searches to users that have their shell set "
+"to /bin/tcsh."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2292
+msgid "ldap_group_search_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2295
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict group searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2299
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_group_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2309
+msgid "ldap_sudo_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2314
+msgid "ldap_autofs_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2245
+msgid ""
+"These options are supported by LDAP domains, but they should be used with "
+"caution. Please include them in your configuration only if you know what you "
+"are doing. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2331
+msgid ""
+"The following example assumes that SSSD is correctly configured and LDAP is "
+"set to one of the domains in the <replaceable>[domains]</replaceable> "
+"section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ldap.5.xml:2337
+#, no-wrap
+msgid ""
+" [domain/LDAP]\n"
+" id_provider = ldap\n"
+" auth_provider = ldap\n"
+" ldap_uri = ldap://ldap.mydomain.org\n"
+" ldap_search_base = dc=mydomain,dc=org\n"
+" ldap_tls_reqcert = demand\n"
+" cache_credentials = true\n"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: sssd-ldap.5.xml:2336 sssd-simple.5.xml:139 sssd-ipa.5.xml:620
+#: sssd-ad.5.xml:237 sssd-sudo.5.xml:56 sssd-sudo.5.xml:78 sssd-krb5.5.xml:450
+#: include/ldap_id_mapping.xml:63
+msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2349 sssd_krb5_locator_plugin.8.xml:61 sssd-ad.5.xml:252
+#: sssd.8.xml:191 sss_seed.8.xml:163
+msgid "NOTES"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2351
+msgid ""
+"The descriptions of some of the configuration options in this manual page "
+"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
+"distribution."
+msgstr ""
+
+#. type: Content of: <refentryinfo>
+#: pam_sss.8.xml:8 include/upstream.xml:2
+msgid ""
+"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
+"fedorahosted.org/sssd</orgname>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: pam_sss.8.xml:13 pam_sss.8.xml:18
+msgid "pam_sss"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: pam_sss.8.xml:19
+msgid "PAM module for SSSD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: pam_sss.8.xml:24
+msgid ""
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:45
+msgid ""
+"<command>pam_sss.so</command> is the PAM interface to the System Security "
+"Services daemon (SSSD). Errors and results are logged through "
+"<command>syslog(3)</command> with the LOG_AUTHPRIV facility."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:55
+msgid "<option>quiet</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:58
+msgid "Suppress log messages for unknown users."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:63
+msgid "<option>forward_pass</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:66
+msgid ""
+"If <option>forward_pass</option> is set the entered password is put on the "
+"stack for other PAM modules to use."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:73
+msgid "<option>use_first_pass</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:76
+msgid ""
+"The argument use_first_pass forces the module to use a previous stacked "
+"modules password and will never prompt the user - if no password is "
+"available or the password is not appropriate, the user will be denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:84
+msgid "<option>use_authtok</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:87
+msgid ""
+"When password changing enforce the module to set the new password to the one "
+"provided by a previously stacked password module."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:94
+msgid "<option>retry=N</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:97
+msgid ""
+"If specified the user is asked another N times for a password if "
+"authentication fails. Default is 0."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:99
+msgid ""
+"Please note that this option might not work as expected if the application "
+"calling PAM handles the user dialog on its own. A typical example is "
+"<command>sshd</command> with <option>PasswordAuthentication</option>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:110
+msgid "MODULE TYPES PROVIDED"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:111
+msgid ""
+"All module types (<option>account</option>, <option>auth</option>, "
+"<option>password</option> and <option>session</option>) are provided."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:117
+msgid "FILES"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:118
+msgid ""
+"If a password reset by root fails, because the corresponding SSSD provider "
+"does not support password resets, an individual message can be displayed. "
+"This message can e.g. contain instructions about how to reset a password."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:123
+msgid ""
+"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
+"filename> where LOC stands for a locale string returned by <citerefentry> "
+"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
+"citerefentry>. If there is no matching file the content of "
+"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
+"the owner of the files and only root may have read and write permissions "
+"while all other users must have only read permissions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:133
+msgid ""
+"These files are searched in the directory <filename>/etc/sssd/customize/"
+"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
+"displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
+msgid "sssd_krb5_locator_plugin"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:22
+msgid ""
+"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
+"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
+"libraries what Realm and which KDC to use. Typically this is done in "
+"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
+"To simplify the configuration the Realm and the KDC can be defined in "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> as described in <citerefentry> "
+"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:48
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry> puts the Realm and the name or IP address of the KDC into "
+"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively. "
+"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
+"libraries it reads and evaluates these variables and returns them to the "
+"libraries."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:63
+msgid ""
+"Not all Kerberos implementations support the use of plugins. If "
+"<command>sssd_krb5_locator_plugin</command> is not available on your system "
+"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:69
+msgid ""
+"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
+"debug messages will be sent to stderr."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
+msgid "sssd-simple"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-simple.5.xml:17
+msgid "the configuration file for SSSD's 'simple' access-control provider"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:24
+msgid ""
+"This manual page describes the configuration of the simple access-control "
+"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry>. For a detailed syntax reference, "
+"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:38
+msgid ""
+"The simple access provider grants or denies access based on an access or "
+"deny list of user or group names. The following rules apply:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:43
+msgid "If all lists are empty, access is granted"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:47
+msgid ""
+"If any list is provided, the order of evaluation is allow,deny. This means "
+"that any matching deny rule will supersede any matched allow rule."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:54
+msgid ""
+"If either or both \"allow\" lists are provided, all users are denied unless "
+"they appear in the list."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:60
+msgid ""
+"If only \"deny\" lists are provided, all users are granted access unless "
+"they appear in the list."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:78
+msgid "simple_allow_users (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:81
+msgid "Comma separated list of users who are allowed to log in."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:88
+msgid "simple_deny_users (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:91
+msgid "Comma separated list of users who are explicitly denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:97
+msgid "simple_allow_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:100
+msgid ""
+"Comma separated list of groups that are allowed to log in. This applies only "
+"to groups within this SSSD domain. Local groups are not evaluated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:108
+msgid "simple_deny_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:111
+msgid ""
+"Comma separated list of groups that are explicitly denied access. This "
+"applies only to groups within this SSSD domain. Local groups are not "
+"evaluated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:70 sssd-ipa.5.xml:71 sssd-ad.5.xml:76
+msgid ""
+"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:120
+msgid ""
+"Specifying no values for any of the lists is equivalent to skipping it "
+"entirely. Beware of this while generating parameters for the simple provider "
+"using automated scripts."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:125
+msgid ""
+"Please note that it is an configuration error if both, simple_allow_users "
+"and simple_deny_users, are defined."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:133
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the simple access provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-simple.5.xml:140
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" access_provider = simple\n"
+" simple_allow_users = user1, user2\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
+msgid "sssd-ipa"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:23
+msgid ""
+"This manual page describes the configuration of the IPA provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:36
+msgid ""
+"The IPA provider is a back end used to connect to an IPA server. (Refer to "
+"the freeipa.org web site for information about IPA servers.) This provider "
+"requires that the machine be joined to the IPA domain; configuration is "
+"almost entirely self-discovered and obtained directly from the server."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:43
+msgid ""
+"The IPA provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:55
+msgid ""
+"However, it is neither necessary nor recommended to set these options. IPA "
+"provider can also be used as an access and chpass provider. As an access "
+"provider it uses HBAC (host-based access control) rules. Please refer to "
+"freeipa.org for more information about HBAC. No configuration of access "
+"provider is required on the client side."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:62
+msgid ""
+"The IPA provider will use the PAC responder if the Kerberos tickets of users "
+"from trusted realms contain a PAC. To make configuration easier the PAC "
+"responder is started automatically if the IPA ID provider is configured."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:78
+msgid "ipa_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:81
+msgid ""
+"Specifies the name of the IPA domain. This is optional. If not provided, "
+"the configuration domain name is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:89
+msgid "ipa_server, ipa_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:92
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the IPA servers to "
+"which SSSD should connect in the order of preference. For more information "
+"on failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:105
+msgid "ipa_hostname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:108
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the IPA domain to identify this host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:116
+msgid "ipa_dyndns_update (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:119
+msgid ""
+"Optional. This option tells SSSD to automatically update the DNS server "
+"built into FreeIPA v2 with the IP address of this client."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:124
+msgid ""
+"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
+"the default Kerberos realm must be set properly in /etc/krb5.conf"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:135
+msgid "ipa_dyndns_iface (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:138
+msgid ""
+"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
+"interface whose IP address should be used for dynamic DNS updates."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:143
+msgid "Default: Use the IP address of the IPA LDAP connection"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:149
+msgid "ipa_hbac_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:152
+msgid "Optional. Use the given string as search base for HBAC related objects."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:156
+msgid "Default: Use base DN"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:162
+msgid "ipa_host_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:165
+msgid "Optional. Use the given string as search base for host objects."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:169 sssd-ipa.5.xml:193 sssd-ipa.5.xml:212 sssd-ipa.5.xml:231
+msgid ""
+"See <quote>ldap_search_base</quote> for information about configuring "
+"multiple search bases."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:174
+msgid ""
+"If filter is given in any of search bases and "
+"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
+"will be ignored."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
+#: include/ldap_search_bases_experimental.xml:23
+msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:186
+msgid "ipa_selinux_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:189
+msgid "Optional. Use the given string as search base for SELinux user maps."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:205
+msgid "ipa_subdomains_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:208
+msgid "Optional. Use the given string as search base for trusted domains."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:217
+msgid "Default: the value of <emphasis>cn=trusts,%basedn</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:224
+msgid "ipa_master_domain_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:227
+msgid "Optional. Use the given string as search base for master domain object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:236
+msgid "Default: the value of <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:243 sssd-krb5.5.xml:232
+msgid "krb5_validate (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:246
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:253
+msgid ""
+"Note that this default differs from the traditional Kerberos provider back "
+"end."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:263
+msgid ""
+"The name of the Kerberos realm. This is optional and defaults to the value "
+"of <quote>ipa_domain</quote>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:267
+msgid ""
+"The name of the Kerberos realm has a special meaning in IPA - it is "
+"converted into the base DN to use for performing LDAP operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:278
+msgid ""
+"Specifies if the host and user principal should be canonicalized when "
+"connecting to IPA LDAP and also for AS requests. This feature is available "
+"with MIT Kerberos >= 1.7"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:291
+msgid "ipa_hbac_refresh (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:294
+msgid ""
+"The amount of time between lookups of the HBAC rules against the IPA server. "
+"This will reduce the latency and load on the IPA server if there are many "
+"access-control requests made in a short period."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:301
+msgid "Default: 5 (seconds)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:306
+msgid "ipa_hbac_treat_deny_as (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:309
+msgid ""
+"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
+"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
+"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
+"client will support two modes of operation during this transition period:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:318
+msgid ""
+"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
+"users will be denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:323
+msgid ""
+"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
+"careful with this option, as it may result in opening unintended access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:328
+msgid "Default: DENY_ALL"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:333
+msgid "ipa_hbac_support_srchost (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:336
+msgid ""
+"If this is set to false, then srchost as given to SSSD by PAM will be "
+"ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:340
+msgid ""
+"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
+"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:351
+msgid "ipa_automount_location (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:354
+msgid "The automounter location this IPA client will be using"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:357
+msgid "Default: The location named \"default\""
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:364
+msgid "ipa_netgroup_member_of (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:367
+msgid "The LDAP attribute that lists netgroup's memberships."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:376
+msgid "ipa_netgroup_member_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:379
+msgid ""
+"The LDAP attribute that lists system users and groups that are direct "
+"members of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: memberUser"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:389
+msgid "ipa_netgroup_member_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:392
+msgid ""
+"The LDAP attribute that lists hosts and host groups that are direct members "
+"of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: memberHost"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:401
+msgid "ipa_netgroup_member_ext_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:404
+msgid ""
+"The LDAP attribute that lists FQDNs of hosts and host groups that are "
+"members of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:408
+msgid "Default: externalHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "full_name_format (string)"
+msgid "ipa_netgroup_domain (string)"
+msgstr "full_name_format (string)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:416
+msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:420
+msgid "Default: nisDomainName"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:426
+msgid "ipa_host_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+msgid "The object class of a host entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: ipaHost"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:437
+msgid "ipa_host_fqdn (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:440
+msgid "The LDAP attribute that contains FQDN of the host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: fqdn"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:449
+msgid "ipa_selinux_usermap_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:460
+msgid "ipa_selinux_usermap_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:463
+msgid "The LDAP attribute that contains the name of SELinux usermap."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:472
+msgid "ipa_selinux_usermap_member_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:475
+msgid ""
+"The LDAP attribute that contains all users / groups this rule match against."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:484
+msgid "ipa_selinux_usermap_member_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:487
+msgid ""
+"The LDAP attribute that contains all hosts / hostgroups this rule match "
+"against."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:496
+msgid "ipa_selinux_usermap_see_also (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:499
+msgid ""
+"The LDAP attribute that contains DN of HBAC rule which can be used for "
+"matching instead of memberUser and memberHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: seeAlso"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:509
+msgid "ipa_selinux_usermap_selinux_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:512
+msgid "The LDAP attribute that contains SELinux user string itself."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:516
+msgid "Default: ipaSELinuxUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:521
+msgid "ipa_selinux_usermap_enabled (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:524
+msgid ""
+"The LDAP attribute that contains whether or not is user map enabled for "
+"usage."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:528
+msgid "Default: ipaEnabledFlag"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:533
+msgid "ipa_selinux_usermap_user_category (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:536
+msgid "The LDAP attribute that contains user category such as 'all'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:540
+msgid "Default: userCategory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:545
+msgid "ipa_selinux_usermap_host_category (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:548
+msgid "The LDAP attribute that contains host category such as 'all'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:552
+msgid "Default: hostCategory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:557
+msgid "ipa_selinux_usermap_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:560
+msgid "The LDAP attribute that contains unique ID of the user map."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: ipaUniqueID"
+msgstr "Padrão: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:569
+msgid "ipa_host_ssh_public_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:572
+msgid "The LDAP attribute that contains the host's SSH public keys."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:576
+msgid "Default: ipaSshPubKey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ipa.5.xml:585
+msgid "SUBDOMAINS PROVIDER"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:587
+msgid ""
+"The IPA subdomains provider behaves slightly differently if it is configured "
+"explicitly or implicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:591
+msgid ""
+"If the option 'subdomains_provider = ipa' is found in the domain section of "
+"sssd.conf, the IPA subdomains provider is configured explicitly, and all "
+"subdomain requests are sent to the IPA server if necessary."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:597
+msgid ""
+"If the option 'subdomains_provider' is not set in the domain section of sssd."
+"conf but there is the option 'id_provider = ipa', the IPA subdomains "
+"provider is configured implictly. In this case, if a subdomain request fails "
+"and indicates that the server does not support subdomains, i.e. is not "
+"configured for trusts, the IPA subdomains provider is disabled. After an "
+"hour or after the IPA provider goes online, the subdomains provider is "
+"enabled again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:614
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the ipa provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ipa.5.xml:621
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" id_provider = ipa\n"
+" ipa_server = ipaserver.example.com\n"
+" ipa_hostname = myhost.example.com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ad.5.xml:10 sssd-ad.5.xml:16
+msgid "sssd-ad"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:23
+msgid ""
+"This manual page describes the configuration of the AD provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:36
+msgid ""
+"The AD provider is a back end used to connect to an Active Directory server. "
+"This provider requires that the machine be joined to the AD domain and a "
+"keytab is available."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:41
+msgid ""
+"The AD provider supports connecting to Active Directory 2008 R2 or later. "
+"Earlier versions may work, but are unsupported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:45
+msgid ""
+"The AD provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:57
+msgid ""
+"However, it is neither necessary nor recommended to set these options. The "
+"AD provider can also be used as an access and chpass provider. No "
+"configuration of the access provider is required on the client side."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:69
+#, no-wrap
+msgid ""
+"ldap_id_mapping = False\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:63
+msgid ""
+"By default, the AD provider will map UID and GID values from the objectSID "
+"parameter in Active Directory. For details on this, see the <quote>ID "
+"MAPPING</quote> section below. If you want to disable ID mapping and instead "
+"rely on POSIX attributes defined in Active Directory, you should set "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:83
+msgid "ad_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:86
+msgid ""
+"Specifies the name of the Active Directory domain. This is optional. If not "
+"provided, the configuration domain name is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:91
+msgid ""
+"For proper operation, this option should be specified as the lower-case "
+"version of the long version of the Active Directory domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:99
+msgid "ad_server, ad_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:102
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the AD servers to "
+"which SSSD should connect in order of preference. For more information on "
+"failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:115
+msgid "ad_hostname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:118
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the Active Directory domain to identify this "
+"host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:124
+msgid ""
+"This field is used to determine the host principal in use in the keytab. It "
+"must match the hostname for which the keytab was issued."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd-ad.5.xml:193
+#, no-wrap
+msgid ""
+"fallback_homedir = /home/%u\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:231
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This example shows only the AD provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:238
+#, no-wrap
+msgid ""
+"[domain/EXAMPLE]\n"
+"id_provider = ad\n"
+"auth_provider = ad\n"
+"access_provider = ad\n"
+"chpass_provider = ad\n"
+"\n"
+"ad_server = dc1.example.com\n"
+"ad_hostname = client.example.com\n"
+"ad_domain = example.com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:258
+#, no-wrap
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_order = expire\n"
+"ldap_account_expire_policy = ad\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:254
+msgid ""
+"The AD access control provider checks if the account is expired. It has the "
+"same effect as the following configuration of the LDAP provider: "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-sudo.5.xml:10 sssd-sudo.5.xml:16
+msgid "sssd-sudo"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-sudo.5.xml:17
+msgid "Configuring sudo with the SSSD back end"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:23
+msgid ""
+"This manual page describes how to configure <citerefentry> "
+"<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </citerefentry> "
+"to work with <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> and how SSSD caches sudo rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:36
+msgid "Configuring sudo to cooperate with SSSD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:38
+msgid ""
+"To enable SSSD as a source for sudo rules, add <emphasis>sss</emphasis> to "
+"the <emphasis>sudoers</emphasis> entry in <citerefentry> "
+"<refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:47
+msgid ""
+"For example, to configure sudo to first lookup rules in the standard "
+"<citerefentry> <refentrytitle>sudoers</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> file (which should contain rules that apply to "
+"local users) and then in SSSD, the nsswitch.conf file should contain the "
+"following line:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:57
+#, no-wrap
+msgid "sudoers: files sss\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:61
+msgid ""
+"More information about configuring the sudoers search order from the "
+"nsswitch.conf file as well as information about the LDAP schema that is used "
+"to store sudo rules in the directory can be found in <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:72
+msgid "Configuring SSSD to fetch sudo rules"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:74
+msgid ""
+"The following example shows how to configure SSSD to download sudo rules "
+"from an LDAP server."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:79
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"config_file_version = 2\n"
+"services = nss, pam, sudo\n"
+"domains = EXAMPLE\n"
+"\n"
+"[domain/EXAMPLE]\n"
+"id_provider = ldap\n"
+"sudo_provider = ldap\n"
+"ldap_uri = ldap://example.com\n"
+"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:92
+msgid ""
+"When the SSSD is configured to use the IPA provider, the sudo provider is "
+"automatically enabled. The sudo search base is configured to use the compat "
+"tree (ou=sudoers,$DC)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:99
+msgid "The SUDO rule caching mechanism"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:101
+msgid ""
+"The biggest challenge, when developing sudo support in SSSD, was to ensure "
+"that running sudo with SSSD as the data source provides the same user "
+"experience and is as fast as sudo but keeps providing the most current set "
+"of rules as possible. To satisfy these requirements, SSSD uses three kinds "
+"of updates. They are referred to as full refresh, smart refresh and rules "
+"refresh."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:109
+msgid ""
+"The <emphasis>smart refresh</emphasis> periodically downloads rules that are "
+"new or were modified after the last update. Its primary goal is to keep the "
+"database growing by fetching only small increments that do not generate "
+"large amounts of network traffic."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:115
+msgid ""
+"The <emphasis>full refresh</emphasis> simply deletes all sudo rules stored "
+"in the cache and replaces them with all rules that are stored on the server. "
+"This is used to keep the cache consistent by removing every rule which was "
+"deleted from the server. However, full refresh may produce a lot of traffic "
+"and thus it should be run only occasionally depending on the size and "
+"stability of the sudo rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:123
+msgid ""
+"The <emphasis>rules refresh</emphasis> ensures that we do not grant the user "
+"more permission than defined. It is triggered each time the user runs sudo. "
+"Rules refresh will find all rules that apply to this user, check their "
+"expiration time and redownload them if expired. In the case that any of "
+"these rules are missing on the server, the SSSD will do an out of band full "
+"refresh because more rules (that apply to other users) may have been deleted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:132
+msgid ""
+"If enabled, SSSD will store only rules that can be applied to this machine. "
+"This means rules that contain one of the following values in "
+"<emphasis>sudoHost</emphasis> attribute:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:139
+msgid "keyword ALL"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:144
+msgid "wildcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:149
+msgid "netgroup (in the form \"+netgroup\")"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:154
+msgid "hostname or fully qualified domain name of this machine"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:159
+msgid "one of the IP addresses of this machine"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:164
+msgid "one of the IP addresses of the network (in the form \"address/mask\")"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:170
+msgid ""
+"There are many configuration options that can be used to adjust the "
+"behavior. Please refer to \"ldap_sudo_*\" in <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> and \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.8.xml:10 sssd.8.xml:15
+msgid "sssd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.8.xml:16
+msgid "System Security Services Daemon"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sssd.8.xml:21
+msgid ""
+"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:31
+msgid ""
+"<command>SSSD</command> provides a set of daemons to manage access to remote "
+"directories and authentication mechanisms. It provides an NSS and PAM "
+"interface toward the system and a pluggable backend system to connect to "
+"multiple different account sources as well as D-Bus interface. It is also "
+"the basis to provide client auditing and policy services for projects like "
+"FreeIPA. It provides a more robust database to store local users as well as "
+"extended user data."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:46
+msgid ""
+"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:53
+msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:57
+msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:60
+msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:69
+msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:73
+msgid ""
+"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:76
+msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:85
+msgid "<option>-f</option>,<option>--debug-to-files</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:89
+msgid ""
+"Send the debug output to files instead of stderr. By default, the log files "
+"are stored in <filename>/var/log/sssd</filename> and there are separate log "
+"files for every SSSD service and domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:97
+msgid "<option>-D</option>,<option>--daemon</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:101
+msgid "Become a daemon after starting up."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:107 sss_seed.8.xml:136
+msgid "<option>-i</option>,<option>--interactive</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:111
+msgid "Run in the foreground, don't become a daemon."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:117 sss_debuglevel.8.xml:42
+msgid "<option>-c</option>,<option>--config</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:121 sss_debuglevel.8.xml:46
+msgid ""
+"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
+"conf</filename>. For reference on the config file syntax and options, "
+"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:135
+msgid "<option>--version</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:139
+msgid "Print version number and exit."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.8.xml:147
+msgid "Signals"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:150
+msgid "SIGTERM/SIGINT"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:153
+msgid ""
+"Informs the SSSD to gracefully terminate all of its child processes and then "
+"shut down the monitor."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:159
+msgid "SIGHUP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:162
+msgid ""
+"Tells the SSSD to stop writing to its current debug file descriptors and to "
+"close and reopen them. This is meant to facilitate log rolling with programs "
+"like logrotate."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:170
+msgid "SIGUSR1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:173
+msgid ""
+"Tells the SSSD to simulate offline operation for one minute. This is mostly "
+"useful for testing purposes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:179
+msgid "SIGUSR2"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:182
+msgid ""
+"Tells the SSSD to go online immediately. This is mostly useful for testing "
+"purposes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:193
+msgid ""
+"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
+"applications will not use the fast in memory cache."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
+msgid "sss_obfuscate"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_obfuscate.8.xml:16
+msgid "obfuscate a clear text password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_obfuscate.8.xml:21
+msgid ""
+"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
+"replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:32
+msgid ""
+"<command>sss_obfuscate</command> converts a given password into human-"
+"unreadable format and places it into appropriate domain section of the SSSD "
+"config file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:37
+msgid ""
+"The cleartext password is read from standard input or entered "
+"interactively. The obfuscated password is put into "
+"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
+"<quote>ldap_default_authtok_type</quote> parameter is set to "
+"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more details on these parameters."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:49
+msgid ""
+"Please note that obfuscating the password provides <emphasis>no real "
+"security benefit</emphasis> as it is still possible for an attacker to "
+"reverse-engineer the password back. Using better authentication mechanisms "
+"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
+"advised."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:63
+msgid "<option>-s</option>,<option>--stdin</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:67
+msgid "The password to obfuscate will be read from standard input."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:79
+#: sss_ssh_knownhostsproxy.1.xml:78
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:79
+msgid ""
+"The SSSD domain to use the password in. The default name is <quote>default</"
+"quote>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:86
+msgid ""
+"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:91
+msgid "Read the config file specified by the positional parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:95
+msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
+msgid "sss_useradd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_useradd.8.xml:16
+msgid "create a new user"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_useradd.8.xml:21
+msgid ""
+"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_useradd.8.xml:32
+msgid ""
+"<command>sss_useradd</command> creates a new user account using the values "
+"specified on the command line plus the default values from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:43 sss_seed.8.xml:76
+msgid ""
+"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:48
+msgid ""
+"Set the UID of the user to the value of <replaceable>UID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:55 sss_usermod.8.xml:43 sss_seed.8.xml:100
+msgid ""
+"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:60 sss_usermod.8.xml:48 sss_seed.8.xml:105
+msgid ""
+"Any text string describing the user. Often used as the field for the user's "
+"full name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:67 sss_usermod.8.xml:55 sss_seed.8.xml:112
+msgid ""
+"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:72
+msgid ""
+"The home directory of the user account. The default is to append the "
+"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
+"that as the home directory. The base that is prepended before "
+"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
+"baseDirectory</quote> setting in sssd.conf."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:82 sss_usermod.8.xml:66 sss_seed.8.xml:124
+msgid ""
+"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:87
+msgid ""
+"The user's login shell. The default is currently <filename>/bin/bash</"
+"filename>. The default can be changed with <quote>user_defaults/"
+"defaultShell</quote> setting in sssd.conf."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:96
+msgid ""
+"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:101
+msgid "A list of existing groups this user is also a member of."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:107
+msgid "<option>-m</option>,<option>--create-home</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:111
+msgid ""
+"Create the user's home directory if it does not exist. The files and "
+"directories contained in the skeleton directory (which can be defined with "
+"the -k option or in the config file) will be copied to the home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:121
+msgid "<option>-M</option>,<option>--no-create-home</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:125
+msgid ""
+"Do not create the user's home directory. Overrides configuration settings."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:132
+msgid ""
+"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:137
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<command>sss_useradd</command>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:143
+msgid ""
+"This option is only valid if the <option>-m</option> (or <option>--create-"
+"home</option>) option is specified, or creation of home directories is set "
+"to TRUE in the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
+msgid ""
+"<option>-Z</option>,<option>--selinux-user</option> "
+"<replaceable>SELINUX_USER</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:157
+msgid ""
+"The SELinux user for the user's login. If not specified, the system default "
+"will be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
+msgid "sssd-krb5"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:23
+msgid ""
+"This manual page describes the configuration of the Kerberos 5 "
+"authentication backend for <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>. For a detailed "
+"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
+"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:36
+msgid ""
+"The Kerberos 5 authentication backend contains auth and chpass providers. It "
+"must be paired with an identity provider in order to function properly (for "
+"example, id_provider = ldap). Some information required by the Kerberos 5 "
+"authentication backend must be provided by the identity provider, such as "
+"the user's Kerberos Principal Name (UPN). The configuration of the identity "
+"provider should have an entry to specify the UPN. Please refer to the man "
+"page for the applicable identity provider for details on how to configure "
+"this."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:47
+msgid ""
+"This backend also provides access control based on the .k5login file in the "
+"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
+"Please note that an empty .k5login file will deny all access to this user. "
+"To activate this feature, use 'access_provider = krb5' in your SSSD "
+"configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:55
+msgid ""
+"In the case where the UPN is not available in the identity backend, "
+"<command>sssd</command> will construct a UPN using the format "
+"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:77
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect, in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled; for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:106
+msgid ""
+"The name of the Kerberos realm. This option is required and must be "
+"specified."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:113
+msgid "krb5_kpasswd, krb5_backup_kpasswd (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:116
+msgid ""
+"If the change password service is not running on the KDC, alternative "
+"servers can be defined here. An optional port number (preceded by a colon) "
+"may be appended to the addresses or hostnames."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:122
+msgid ""
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. NOTE: Even if there are no more kpasswd "
+"servers to try, the backend is not switched to operate offline if "
+"authentication against the KDC is still possible."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:129
+msgid "Default: Use the KDC"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:135
+msgid "krb5_ccachedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:138
+msgid ""
+"Directory to store credential caches. All the substitution sequences of "
+"krb5_ccname_template can be used here, too, except %d and %P. If the "
+"directory does not exist, it will be created. If %u, %U, %p or %h are used, "
+"a private directory belonging to the user is created. Otherwise, a public "
+"directory with restricted deletion flag (aka sticky bit, as described in "
+"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
+"</citerefentry> for details) is created."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:152
+msgid "Default: /tmp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:158
+msgid "krb5_ccname_template (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:174
+msgid "login UID"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:177
+msgid "%p"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:178
+msgid "principal name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:182
+msgid "%r"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:183
+msgid "realm name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:186
+msgid "%h"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:187
+msgid "home directory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:192
+msgid "value of krb5ccache_dir"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:197
+msgid "%P"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:198
+msgid "the process ID of the SSSD client"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:161
+msgid ""
+"Location of the user's credential cache. Two credential cache types are "
+"currently supported: <quote>FILE</quote> and <quote>DIR</quote>. The cache "
+"can be specified either as <replaceable>TYPE:RESIDUAL</replaceable>, or as "
+"an absolute path, which implies the <quote>FILE</quote> type. In the "
+"template, the following sequences are substituted: <placeholder type="
+"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
+"used to create a unique filename in a safe way."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:212
+msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:218
+msgid "krb5_auth_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:221
+msgid ""
+"Timeout in seconds after an online authentication request or change password "
+"request is aborted. If possible, the authentication request is continued "
+"offline."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:235
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed. The keytab is checked for entries sequentially, and the first entry "
+"with a matching realm is used for validation. If no entry matches the realm, "
+"the last entry in the keytab is used. This process can be used to validate "
+"environments using cross-realm trust by placing the appropriate keytab entry "
+"as the last entry or the only entry in the keytab file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:250
+msgid "krb5_keytab (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:253
+msgid ""
+"The location of the keytab to use when validating credentials obtained from "
+"KDCs."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:257
+msgid "Default: /etc/krb5.keytab"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:263
+msgid "krb5_store_password_if_offline (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:266
+msgid ""
+"Store the password of the user if the provider is offline and use it to "
+"request a TGT when the provider comes online again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:271
+msgid ""
+"NOTE: this feature is only available on Linux. Passwords stored in this way "
+"are kept in plaintext in the kernel keyring and are potentially accessible "
+"by the root user (with difficulty)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:284
+msgid "krb5_renewable_lifetime (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:287
+msgid ""
+"Request a renewable ticket with a total lifetime, given as an integer "
+"immediately followed by a time unit:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:326
+msgid "<emphasis>s</emphasis> for seconds"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:329
+msgid "<emphasis>m</emphasis> for minutes"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:298 sssd-krb5.5.xml:332
+msgid "<emphasis>h</emphasis> for hours"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:301 sssd-krb5.5.xml:335
+msgid "<emphasis>d</emphasis> for days."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:304
+msgid "If there is no unit given, <emphasis>s</emphasis> is assumed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:308
+msgid ""
+"NOTE: It is not possible to mix units. To set the renewable lifetime to one "
+"and a half hours, use '90m' instead of '1h30m'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:313
+msgid "Default: not set, i.e. the TGT is not renewable"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:319
+msgid "krb5_lifetime (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:322
+msgid ""
+"Request ticket with a with a lifetime, given as an integer immediately "
+"followed by a time unit:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:338
+msgid "If there is no unit given <emphasis>s</emphasis> is assumed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:342
+msgid ""
+"NOTE: It is not possible to mix units. To set the lifetime to one and a "
+"half hours please use '90m' instead of '1h30m'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:347
+msgid ""
+"Default: not set, i.e. the default ticket lifetime configured on the KDC."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:354
+#, fuzzy
+#| msgid "reconnection_retries (integer)"
+msgid "krb5_renew_interval (integer)"
+msgstr "reconnection_retries (inteiro)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:357
+msgid ""
+"The time in seconds between two checks if the TGT should be renewed. TGTs "
+"are renewed if about half of their lifetime is exceeded."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:362
+msgid "If this option is not set or is 0 the automatic renewal is disabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:372
+msgid "krb5_use_fast (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:375
+msgid ""
+"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
+"authentication. The following options are supported:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:380
+msgid ""
+"<emphasis>never</emphasis> use FAST. This is equivalent to not setting this "
+"option at all."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:384
+msgid ""
+"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
+"continue the authentication without it."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:389
+msgid ""
+"<emphasis>demand</emphasis> to use FAST. The authentication fails if the "
+"server does not require fast."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:394
+msgid "Default: not set, i.e. FAST is not used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:397
+msgid "NOTE: a keytab is required to use FAST."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:400
+msgid ""
+"NOTE: SSSD supports FAST only with MIT Kerberos version 1.8 and later. If "
+"SSSD is used with an older version of MIT Kerberos, using this option is a "
+"configuration error."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:409
+msgid "krb5_fast_principal (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:412
+msgid "Specifies the server principal to use for FAST."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:421
+msgid ""
+"Specifies if the host and user principal should be canonicalized. This "
+"feature is available with MIT Kerberos 1.7 and later versions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:65
+msgid ""
+"If the auth-module krb5 is used in an SSSD domain, the following options "
+"must be used. See the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page, section "
+"<quote>DOMAIN SECTIONS</quote>, for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:443
+msgid ""
+"The following example assumes that SSSD is correctly configured and FOO is "
+"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
+"example shows only configuration of Kerberos authentication; it does not "
+"include any identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-krb5.5.xml:451
+#, no-wrap
+msgid ""
+" [domain/FOO]\n"
+" auth_provider = krb5\n"
+" krb5_server = 192.168.1.1\n"
+" krb5_realm = EXAMPLE.COM\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
+msgid "sss_groupadd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupadd.8.xml:16
+msgid "create a new group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupadd.8.xml:21
+msgid ""
+"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupadd.8.xml:32
+msgid ""
+"<command>sss_groupadd</command> creates a new group. These groups are "
+"compatible with POSIX groups, with the additional feature that they can "
+"contain other groups as members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupadd.8.xml:43 sss_seed.8.xml:88
+msgid ""
+"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupadd.8.xml:48
+msgid ""
+"Set the GID of the group to the value of <replaceable>GID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
+msgid "sss_userdel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_userdel.8.xml:16
+msgid "delete a user account"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_userdel.8.xml:21
+msgid ""
+"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_userdel.8.xml:32
+msgid ""
+"<command>sss_userdel</command> deletes a user identified by login name "
+"<replaceable>LOGIN</replaceable> from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:44
+msgid "<option>-r</option>,<option>--remove</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:48
+msgid ""
+"Files in the user's home directory will be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:56
+msgid "<option>-R</option>,<option>--no-remove</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:60
+msgid ""
+"Files in the user's home directory will NOT be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:68
+msgid "<option>-f</option>,<option>--force</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:72
+msgid ""
+"This option forces <command>sss_userdel</command> to remove the user's home "
+"directory and mail spool, even if they are not owned by the specified user."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:80
+msgid "<option>-k</option>,<option>--kick</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:84
+msgid "Before actually deleting the user, terminate all his processes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
+msgid "sss_groupdel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupdel.8.xml:16
+msgid "delete a group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupdel.8.xml:21
+msgid ""
+"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupdel.8.xml:32
+msgid ""
+"<command>sss_groupdel</command> deletes a group identified by its name "
+"<replaceable>GROUP</replaceable> from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
+msgid "sss_groupshow"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupshow.8.xml:16
+msgid "print properties of a group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupshow.8.xml:21
+msgid ""
+"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupshow.8.xml:32
+msgid ""
+"<command>sss_groupshow</command> displays information about a group "
+"identified by its name <replaceable>GROUP</replaceable>. The information "
+"includes the group ID number, members of the group and the parent group."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupshow.8.xml:43
+msgid "<option>-R</option>,<option>--recursive</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupshow.8.xml:47
+msgid ""
+"Also print indirect group members in a tree-like hierarchy. Note that this "
+"also affects printing parent groups - without <option>R</option>, only the "
+"direct parent will be printed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
+msgid "sss_usermod"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_usermod.8.xml:16
+msgid "modify a user account"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_usermod.8.xml:21
+msgid ""
+"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_usermod.8.xml:32
+msgid ""
+"<command>sss_usermod</command> modifies the account specified by "
+"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
+"on the command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:60
+msgid "The home directory of the user account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:71
+msgid "The user's login shell."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:82
+msgid ""
+"Append this user to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:96
+msgid ""
+"Remove this user from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:103
+msgid "<option>-l</option>,<option>--lock</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:107
+msgid "Lock the user account. The user won't be able to log in."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:114
+msgid "<option>-u</option>,<option>--unlock</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:118
+msgid "Unlock the user account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:129
+msgid "The SELinux user for the user's login."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_cache.8.xml:10 sss_cache.8.xml:15
+msgid "sss_cache"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_cache.8.xml:16
+msgid "perform cache cleanup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_cache.8.xml:21
+msgid ""
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_cache.8.xml:31
+msgid ""
+"<command>sss_cache</command> invalidates records in SSSD cache. Invalidated "
+"records are forced to be reloaded from server as soon as related SSSD "
+"backend is online."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:42
+msgid ""
+"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:47
+msgid "Invalidate specific user."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:53
+msgid "<option>-U</option>,<option>--users</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:57
+msgid ""
+"Invalidate all user records. This option overrides invalidation of specific "
+"user if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:64
+msgid ""
+"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:69
+msgid "Invalidate specific group."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:75
+msgid "<option>-G</option>,<option>--groups</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:79
+msgid ""
+"Invalidate all group records. This option overrides invalidation of specific "
+"group if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:86
+msgid ""
+"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:91
+msgid "Invalidate specific netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:97
+msgid "<option>-N</option>,<option>--netgroups</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:101
+msgid ""
+"Invalidate all netgroup records. This option overrides invalidation of "
+"specific netgroup if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:108
+msgid ""
+"<option>-s</option>,<option>--service</option> <replaceable>service</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:113
+msgid "Invalidate specific service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:119
+msgid "<option>-S</option>,<option>--services</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:123
+msgid ""
+"Invalidate all service records. This option overrides invalidation of "
+"specific service if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:130
+msgid ""
+"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:135
+msgid "Invalidate specific autofs maps."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:141
+msgid "<option>-A</option>,<option>--autofs-maps</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:145
+msgid ""
+"Invalidate all autofs maps. This option overrides invalidation of specific "
+"map if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:152
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:157
+msgid "Restrict invalidation process only to a particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
+msgid "sss_debuglevel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_debuglevel.8.xml:16
+msgid "change debug level while SSSD is running"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_debuglevel.8.xml:21
+msgid ""
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
+"replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_debuglevel.8.xml:32
+msgid ""
+"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
+"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
+"running."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_debuglevel.8.xml:59
+msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_seed.8.xml:10 sss_seed.8.xml:15
+msgid "sss_seed"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_seed.8.xml:16
+msgid "seed the SSSD cache with a user"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_seed.8.xml:21
+msgid ""
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:33
+msgid ""
+"<command>sss_seed</command> seeds the SSSD cache with a user entry and "
+"temporary password. If a user entry is already present in the SSSD cache "
+"then the entry is updated with the temporary password."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:46
+msgid ""
+"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:51
+msgid ""
+"Provide the name of the domain in which the user is a member of. The domain "
+"is also used to retrieve user information. The domain must be configured in "
+"sssd.conf. The <replaceable>DOMAIN</replaceable> option must be provided. "
+"Information retrieved from the domain overrides what is provided in the "
+"options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:63
+msgid ""
+"<option>-n</option>,<option>--username</option> <replaceable>USER</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:68
+msgid ""
+"The username of the entry to be created or modified in the cache. The "
+"<replaceable>USER</replaceable> option must be provided."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:81
+msgid "Set the UID of the user to <replaceable>UID</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:93
+msgid "Set the GID of the user to <replaceable>GID</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:117
+msgid ""
+"Set the home directory of the user to <replaceable>HOME_DIR</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:129
+msgid "Set the login shell of the user to <replaceable>SHELL</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:140
+msgid ""
+"Interactive mode for entering user information. This option will only prompt "
+"for information not provided in the options or retrieved from the domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:148
+msgid ""
+"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:153
+msgid ""
+"Specify file to read user's password from. (if not specified password is "
+"prompted for)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:165
+msgid ""
+"The length of the password (or the size of file specified with -p or --"
+"password-file option) must be less than or equal to PASS_MAX bytes (64 bytes "
+"on systems with no globally-defined PASS_MAX value)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
+msgid "sss_ssh_authorizedkeys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
+msgid "1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_authorizedkeys.1.xml:16
+msgid "get OpenSSH authorized keys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_authorizedkeys.1.xml:21
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>USER</replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:32
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
+"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
+"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> for more information)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:41
+msgid ""
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
+"command> for public key user authentication if it is compiled with support "
+"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
+"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:58
+#, no-wrap
+msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:51
+msgid ""
+"If <quote>AuthorizedKeysCommand</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by putting the following directive "
+"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:69
+#, no-wrap
+msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:62
+msgid ""
+"If <quote>PubkeyAgent</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by using the following directive "
+"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_authorizedkeys.1.xml:84
+msgid ""
+"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
+msgid "sss_ssh_knownhostsproxy"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_knownhostsproxy.1.xml:16
+msgid "get OpenSSH host keys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_knownhostsproxy.1.xml:21
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
+"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:33
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
+"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
+"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
+"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> for more information) <filename>/var/lib/sss/"
+"pubconf/known_hosts</filename> and estabilishes connection to the host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:43
+msgid ""
+"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
+"create the connection to the host instead of opening a socket."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_knownhostsproxy.1.xml:55
+#, no-wrap
+msgid ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:48
+msgid ""
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
+"command> for host key authentication by using the following directives for "
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_ssh_knownhostsproxy.1.xml:66
+msgid ""
+"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:71
+msgid ""
+"Use port <replaceable>PORT</replaceable> to connect to the host. By "
+"default, port 22 is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:83
+msgid ""
+"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/service_discovery.xml:2
+msgid "SERVICE DISCOVERY"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/service_discovery.xml:4
+msgid ""
+"The service discovery feature allows back ends to automatically find the "
+"appropriate servers to connect to using a special DNS query. This feature is "
+"not supported for backup servers."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:9 include/ldap_id_mapping.xml:57
+msgid "Configuration"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:11
+msgid ""
+"If no servers are specified, the back end automatically uses service "
+"discovery to try to find a server. Optionally, the user may choose to use "
+"both fixed server addresses and service discovery by inserting a special "
+"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
+"preference is maintained. This feature is useful if, for example, the user "
+"prefers to use service discovery whenever possible, and fall back to a "
+"specific server when no servers can be discovered using DNS."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:23
+msgid "The domain name"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:25
+msgid ""
+"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for more details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:35
+msgid "The protocol"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:37
+msgid ""
+"The queries usually specify _tcp as the protocol. Exceptions are documented "
+"in respective option description."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:42
+msgid "See Also"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:44
+msgid ""
+"For more information on the service discovery mechanism, refer to RFC 2782."
+msgstr ""
+
+#. type: Content of: outside any tag (error?)
+#: include/upstream.xml:1
+msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/failover.xml:2
+msgid "FAILOVER"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/failover.xml:4
+msgid ""
+"The failover feature allows back ends to automatically switch to a different "
+"server if the current server fails."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:8
+msgid "Failover Syntax"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:10
+msgid ""
+"The list of servers is given as a comma-separated list; any number of spaces "
+"is allowed around the comma. The servers are listed in order of preference. "
+"The list can contain any number of servers."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:16
+msgid ""
+"For each failover-enabled config option, two variants exist: "
+"<emphasis>primary</emphasis> and <emphasis>backup</emphasis>. The idea is "
+"that servers in the primary list are preferred and backup servers are only "
+"searched if no primary servers can be reached. If a backup server is "
+"selected, a timeout of 31 seconds is set. After this timeout SSSD will "
+"periodically try to reconnect to one of the primary servers. If it succeeds, "
+"it will replace the current active (backup) server."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:27
+msgid "The Failover Mechanism"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:29
+msgid ""
+"The failover mechanism distinguishes between a machine and a service. The "
+"back end first tries to resolve the hostname of a given machine; if this "
+"resolution attempt fails, the machine is considered offline. No further "
+"attempts are made to connect to this machine for any other service. If the "
+"resolution attempt succeeds, the back end tries to connect to a service on "
+"this machine. If the service connection attempt fails, then only this "
+"particular service is considered offline and the back end automatically "
+"switches over to the next service. The machine is still considered online "
+"and might still be tried for another service."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:42
+msgid ""
+"Further connection attempts are made to machines or services marked as "
+"offline after a specified period of time; this is currently hard coded to 30 "
+"seconds."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:47
+msgid ""
+"If there are no more machines to try, the back end as a whole switches to "
+"offline mode, and then attempts to reconnect every 30 seconds."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/ldap_id_mapping.xml:2
+msgid "ID MAPPING"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:4
+msgid ""
+"The ID-mapping feature allows SSSD to act as a client of Active Directory "
+"without requiring administrators to extend user attributes to support POSIX "
+"attributes for user and group identifiers."
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:9
+msgid ""
+"NOTE: When ID-mapping is enabled, the uidNumber and gidNumber attributes are "
+"ignored. This is to avoid the possibility of conflicts between automatically-"
+"assigned and manually-assigned values. If you need to use manually-assigned "
+"values, ALL values must be manually-assigned."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/ldap_id_mapping.xml:17
+msgid "Mapping Algorithm"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:19
+msgid ""
+"Active Directory provides an objectSID for every user and group object in "
+"the directory. This objectSID can be broken up into components that "
+"represent the Active Directory domain identity and the relative identifier "
+"(RID) of the user or group object."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:25
+msgid ""
+"The SSSD ID-mapping algorithm takes a range of available UIDs and divides it "
+"into equally-sized component sections - called \"slices\"-. Each slice "
+"represents the space available to an Active Directory domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:31
+msgid ""
+"When a user or group entry for a particular domain is encountered for the "
+"first time, the SSSD allocates one of the available slices for that domain. "
+"In order to make this slice-assignment repeatable on different client "
+"machines, we select the slice based on the following algorithm:"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:38
+msgid ""
+"The SID string is passed through the murmurhash3 algorithm to convert it to "
+"a 32-bit hashed value. We then take the modulus of this value with the total "
+"number of available slices to pick the slice."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:44
+msgid ""
+"NOTE: It is possible to encounter collisions in the hash and subsequent "
+"modulus. In these situations, we will select the next available slice, but "
+"it may not be possible to reproduce the same exact set of slices on other "
+"machines (since the order that they are encountered will determine their "
+"slice). In this situation, it is recommended to either switch to using "
+"explicit POSIX attributes in Active Directory (disabling ID-mapping) or "
+"configure a default domain to guarantee that at least one is always "
+"consistent. See <quote>Configuration</quote> for details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:59
+msgid ""
+"Minimum configuration (in the <quote>[domain/DOMAINNAME]</quote> section):"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para><programlisting>
+#: include/ldap_id_mapping.xml:64
+#, no-wrap
+msgid ""
+"ldap_id_mapping = True\n"
+"ldap_schema = ad\n"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:69
+msgid ""
+"The default configuration results in configuring 10,000 slices, each capable "
+"of holding up to 200,000 IDs, starting from 10,001 and going up to "
+"2,000,100,000. This should be sufficient for most deployments."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><title>
+#: include/ldap_id_mapping.xml:75
+msgid "Advanced Configuration"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:78
+msgid "ldap_idmap_range_min (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:81
+msgid ""
+"Specifies the lower bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:85
+msgid ""
+"NOTE: This option is different from <quote>min_id</quote> in that "
+"<quote>min_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>min_id</"
+"quote> be less-than or equal to <quote>ldap_idmap_range_min</quote>"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:95 include/ldap_id_mapping.xml:131
+msgid "Default: 200000"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:100
+msgid "ldap_idmap_range_max (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:103
+msgid ""
+"Specifies the upper bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:107
+msgid ""
+"NOTE: This option is different from <quote>max_id</quote> in that "
+"<quote>max_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>max_id</"
+"quote> be greater-than or equal to <quote>ldap_idmap_range_max</quote>"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:117
+msgid "Default: 2000200000"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:122
+msgid "ldap_idmap_range_size (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:125
+msgid ""
+"Specifies the number of IDs available for each slice. If the range size "
+"does not divide evenly into the min and max values, it will create as many "
+"complete slices as it can."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:136
+msgid "ldap_idmap_default_domain_sid (string)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:139
+msgid ""
+"Specify the domain SID of the default domain. This will guarantee that this "
+"domain will always be assigned to slice zero in the ID map, bypassing the "
+"murmurhash algorithm described above."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:150
+msgid "ldap_idmap_default_domain (string)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:153
+msgid "Specify the name of the default domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:161
+msgid "ldap_idmap_autorid_compat (boolean)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:164
+msgid ""
+"Changes the behavior of the ID-mapping algorithm to behave more similarly to "
+"winbind's <quote>idmap_autorid</quote> algorithm."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:169
+msgid ""
+"When this option is configured, domains will be allocated starting with "
+"slice zero and increasing monatomically with each additional domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:174
+msgid ""
+"NOTE: This algorithm is non-deterministic (it depends on the order that "
+"users and groups are requested). If this mode is required for compatibility "
+"with machines running winbind, it is recommended to also use the "
+"<quote>ldap_idmap_default_domain_sid</quote> option to guarantee that at "
+"least one domain is consistently allocated to slice zero."
+msgstr ""
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help.xml:3
+msgid "<option>-?</option>,<option>--help</option>"
+msgstr ""
+
+#. type: Content of: <varlistentry><listitem><para>
+#: include/param_help.xml:7 include/param_help_py.xml:7
+msgid "Display help message and exit."
+msgstr ""
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help_py.xml:3
+msgid "<option>-h</option>,<option>--help</option>"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:3
+msgid ""
+"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
+"default value as well as the lowest allowed value, 0xFFF0 is the most "
+"verbose mode. This setting overrides the settings from config file."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:8
+msgid "Currently supported debug levels:"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:11
+msgid ""
+"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
+"SSSD from starting up or causes it to cease running."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:15
+msgid ""
+"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
+"the SSSD, but one that indicates that at least one major feature is not "
+"going to work properly."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:20
+msgid ""
+"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
+"particular request or operation has failed."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:24
+msgid ""
+"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
+"percolate down to cause the operation failure of 2."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:28
+msgid "<emphasis>0x0100</emphasis>: Configuration settings."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:31
+msgid "<emphasis>0x0200</emphasis>: Function data."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:34
+msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:37
+msgid ""
+"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:40
+msgid ""
+"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
+"may be interesting."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:43
+msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:46
+msgid ""
+"To log required debug levels, simply add their numbers together as shown in "
+"following examples:"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:49
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
+"serious failures and function data use 0x0270."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:53
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
+"function data, trace messages for internal control functions use 0x1310."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:57
+msgid ""
+"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
+"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
+msgstr ""
+
+#. type: Content of: outside any tag (error?)
+#: include/experimental.xml:1
+msgid ""
+"<emphasis> This is an experimental feature, please use http://fedorahosted."
+"org/sssd to report any issues. </emphasis>"
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/local.xml:2
+msgid "THE LOCAL DOMAIN"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:4
+msgid ""
+"In order to function correctly, a domain with <quote>id_provider=local</"
+"quote> must be created and the SSSD must be running."
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:9
+msgid ""
+"The administrator might want to use the SSSD local users instead of "
+"traditional UNIX users in cases where the group nesting (see <citerefentry> "
+"<refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</manvolnum> </"
+"citerefentry>) is needed. The local users are also useful for testing and "
+"development of the SSSD without having to deploy a full remote server. The "
+"<command>sss_user*</command> and <command>sss_group*</command> tools use a "
+"local LDB storage to store users and groups."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/seealso.xml:2
+msgid "SEE ALSO"
+msgstr "VEJA TAMBÉM"
+
+#. type: Content of: <refsect1><para>
+#: include/seealso.xml:4
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
+"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_ssh_knowhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:3
+#: include/ldap_search_bases_experimental.xml:3
+msgid ""
+"An optional base DN, search scope and LDAP filter to restrict LDAP searches "
+"for this attribute type."
+msgstr ""
+
+#. type: Content of: <listitem><para><programlisting>
+#: include/ldap_search_bases.xml:9
+#: include/ldap_search_bases_experimental.xml:9
+#, no-wrap
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:7
+#: include/ldap_search_bases_experimental.xml:7
+msgid "syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:13
+#: include/ldap_search_bases_experimental.xml:13
+msgid ""
+"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
+"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
+"rfc2254.txt"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:19
+#: include/ldap_search_bases_experimental.xml:19
+msgid ""
+"For examples of this syntax, please refer to the <quote>ldap_search_base</"
+"quote> examples section."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:27
+#: include/ldap_search_bases_experimental.xml:27
+msgid ""
+"Please note that specifying scope or filter is not supported for searches "
+"against an Active Directory Server that might yield a large number of "
+"results and trigger the Range Retrieval extension in the response."
+msgstr ""
+
+#. type: Content of: <para>
+#: include/autofs_restart.xml:2
+msgid ""
+"Please note that the automounter only reads the master map on startup, so if "
+"any autofs-related changes are made to the sssd.conf, you typically also "
+"need to restart the automounter daemon after restarting the SSSD."
+msgstr ""
diff --git a/src/man/po/ru.po b/src/man/po/ru.po
index 159736e3a..ea1410acd 100644
--- a/src/man/po/ru.po
+++ b/src/man/po/ru.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Russian (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Russian (http://www.transifex.com/projects/p/sssd/language/"
"ru/)\n"
"Language: ru\n"
"MIME-Version: 1.0\n"
@@ -5570,8 +5570,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: memberUser"
-msgstr ""
+msgstr "По умолчанию: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5587,8 +5589,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: memberHost"
-msgstr ""
+msgstr "По умолчанию: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5604,8 +5608,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr ""
+msgstr "По умолчанию: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
@@ -5619,8 +5625,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: shadowWarning"
msgid "Default: nisDomainName"
-msgstr ""
+msgstr "По умолчанию: shadowWarning"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
@@ -5634,8 +5642,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "По умолчанию: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5649,8 +5659,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: fqdn"
-msgstr ""
+msgstr "По умолчанию: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5704,8 +5716,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "По умолчанию: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5719,8 +5733,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "По умолчанию: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
@@ -5736,8 +5752,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaEnabledFlag"
-msgstr ""
+msgstr "По умолчанию: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
@@ -5751,8 +5769,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: userCategory"
-msgstr ""
+msgstr "По умолчанию: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
@@ -5766,8 +5786,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: homeDirectory"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "По умолчанию: homeDirectory"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
@@ -5781,8 +5803,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "По умолчанию: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
@@ -5796,8 +5820,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "По умолчанию: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
diff --git a/src/man/po/sssd-docs.pot b/src/man/po/sssd-docs.pot
index dbf430b16..eef8c4b98 100644
--- a/src/man/po/sssd-docs.pot
+++ b/src/man/po/sssd-docs.pot
@@ -6,9 +6,9 @@
#, fuzzy
msgid ""
msgstr ""
-"Project-Id-Version: sssd-docs 1.9.6\n"
+"Project-Id-Version: sssd-docs 1.9.7\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
diff --git a/src/man/po/sv.po b/src/man/po/sv.po
new file mode 100644
index 000000000..dabce88a5
--- /dev/null
+++ b/src/man/po/sv.po
@@ -0,0 +1,8430 @@
+# SOME DESCRIPTIVE TITLE
+# Copyright (C) YEAR Red Hat
+# This file is distributed under the same license as the sssd-docs package.
+#
+# Translators:
+# Göran Uddeborg <goeran@uddeborg.se>, 2014
+msgid ""
+msgstr ""
+"Project-Id-Version: SSSD\n"
+"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-07 21:50+0000\n"
+"Last-Translator: Göran Uddeborg <goeran@uddeborg.se>\n"
+"Language-Team: Swedish (http://www.transifex.com/projects/p/sssd/language/"
+"sv/)\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#. type: Content of: <reference><title>
+#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
+#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
+#: sssd-ad.5.xml:5 sssd-sudo.5.xml:5 sssd.8.xml:5 sss_obfuscate.8.xml:5
+#: sss_useradd.8.xml:5 sssd-krb5.5.xml:5 sss_groupadd.8.xml:5
+#: sss_userdel.8.xml:5 sss_groupdel.8.xml:5 sss_groupshow.8.xml:5
+#: sss_usermod.8.xml:5 sss_cache.8.xml:5 sss_debuglevel.8.xml:5
+#: sss_seed.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
+#: sss_ssh_knownhostsproxy.1.xml:5
+msgid "SSSD Manual pages"
+msgstr "SSSD-manualsidor"
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
+msgid "sss_groupmod"
+msgstr "sss_groupmod"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
+#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
+#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
+#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
+#: sss_debuglevel.8.xml:11 sss_seed.8.xml:11
+msgid "8"
+msgstr "8"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupmod.8.xml:16
+msgid "modify a group"
+msgstr "ändra en grupp"
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupmod.8.xml:21
+msgid ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>flaggor</"
+"replaceable></arg> <arg choice='plain'> <replaceable>GRUPP</replaceable></"
+"arg>"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
+#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
+#: sssd-ad.5.xml:21 sssd-sudo.5.xml:21 sssd.8.xml:29 sss_obfuscate.8.xml:30
+#: sss_useradd.8.xml:30 sssd-krb5.5.xml:21 sss_groupadd.8.xml:30
+#: sss_userdel.8.xml:30 sss_groupdel.8.xml:30 sss_groupshow.8.xml:30
+#: sss_usermod.8.xml:30 sss_cache.8.xml:29 sss_debuglevel.8.xml:30
+#: sss_seed.8.xml:31 sss_ssh_authorizedkeys.1.xml:30
+#: sss_ssh_knownhostsproxy.1.xml:31
+msgid "DESCRIPTION"
+msgstr "BESKRIVNING"
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupmod.8.xml:32
+msgid ""
+"<command>sss_groupmod</command> modifies the group to reflect the changes "
+"that are specified on the command line."
+msgstr ""
+"<command>sss_groupmod</command> ändrar gruppen till att avspegla de "
+"ändringar som anges på kommandoraden."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
+#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
+#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
+#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_seed.8.xml:42
+#: sss_ssh_authorizedkeys.1.xml:75 sss_ssh_knownhostsproxy.1.xml:62
+msgid "OPTIONS"
+msgstr "FLAGGOR"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
+msgid ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-a</option>,<option>--append-group</option> <replaceable>GRUPPER</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:48
+msgid ""
+"Append this group to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+"Lägg till denna grupp till grupper som anges av parametern "
+"<replaceable>GRUPPER</replaceable>. Parametern <replaceable>GRUPPER</"
+"replaceable> är en kommaseparerad lista av gruppnamn."
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
+msgid ""
+"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+"<option>-r</option>,<option>--remove-group</option> <replaceable>GRUPPER</"
+"replaceable>"
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupmod.8.xml:62
+msgid ""
+"Remove this group from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+"Ta bort denna grupp från grupper som anges av parametern "
+"<replaceable>GRUPPER</replaceable>."
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
+msgid "sssd.conf"
+msgstr "sssd.conf"
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
+#: sssd-ipa.5.xml:11 sssd-ad.5.xml:11 sssd-sudo.5.xml:11 sssd-krb5.5.xml:11
+msgid "5"
+msgstr "5"
+
+#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
+#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
+#: sssd-ipa.5.xml:12 sssd-ad.5.xml:12 sssd-sudo.5.xml:12 sssd-krb5.5.xml:12
+msgid "File Formats and Conventions"
+msgstr "Filformat och konventioner"
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
+#: sssd-ipa.5.xml:17 sssd-ad.5.xml:17 sssd-krb5.5.xml:17
+msgid "the configuration file for SSSD"
+msgstr "konfigurationsfilen för SSSD"
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:21
+msgid "FILE FORMAT"
+msgstr "FILFORMAT"
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:29
+#, no-wrap
+msgid ""
+" <replaceable>[section]</replaceable>\n"
+" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
+" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
+" "
+msgstr ""
+"<replaceable>[avsnitt]</replaceable>\n"
+"<replaceable>nyckel</replaceable> = <replaceable>värde</replaceable> <replaceable>nyckel2</replaceable> = <replaceable>värde2 värde3</replaceable>\n"
+" "
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:24
+msgid ""
+"The file has an ini-style syntax and consists of sections and parameters. A "
+"section begins with the name of the section in square brackets and continues "
+"until the next section begins. An example of section with single and multi-"
+"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:36
+msgid ""
+"The data types used are string (no quotes needed), integer and bool (with "
+"values of <quote>TRUE/FALSE</quote>)."
+msgstr ""
+"De datatyper som används är sträng (citationstecken behövs inte), heltal och "
+"bool (med värdena <quote>TRUE/FALSE</quote>)."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:41
+msgid ""
+"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
+"(<quote>;</quote>). Inline comments are not supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:47
+msgid ""
+"All sections can have an optional <replaceable>description</replaceable> "
+"parameter. Its function is only as a label for the section."
+msgstr ""
+"Alla avsnitt kan ha en frivillig parameter <replaceable>beskrivning</"
+"replaceable>. Dess funktion är endast som en etikett för avsnittet."
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:53
+msgid ""
+"<filename>sssd.conf</filename> must be a regular file, owned by root and "
+"only root may read from or write to the file."
+msgstr ""
+"<filename>sssd.conf</filename> måste vara en vanlig fil, ägd av root och "
+"endast root får kunna läsa från eller skriva till filen."
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:59
+msgid "SPECIAL SECTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:62
+msgid "The [sssd] section"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
+#: sssd.conf.5.xml:71 sssd.conf.5.xml:1771
+msgid "Section parameters"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:73
+msgid "config_file_version (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:76
+msgid ""
+"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
+"version 2."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:82
+msgid "services"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:85
+msgid ""
+"Comma separated list of services that are started when sssd itself starts."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:89
+msgid ""
+"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
+"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
+"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
+"phrase>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
+msgid "reconnection_retries (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:101 sssd.conf.5.xml:293
+msgid ""
+"Number of times services should attempt to reconnect in the event of a Data "
+"Provider crash or restart before they give up"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:106 sssd.conf.5.xml:298
+msgid "Default: 3"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:111
+msgid "domains"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:114
+msgid ""
+"A domain is a database containing user information. SSSD can use more "
+"domains at the same time, but at least one must be configured or SSSD won't "
+"start. This parameter described the list of domains in the order you want "
+"them to be queried."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:124 sssd.conf.5.xml:1551
+msgid "re_expression (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:127
+msgid ""
+"Default regular expression that describes how to parse the string containing "
+"user name and domain into these components."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:132
+msgid ""
+"Each domain can have an individual regular expression configured. For some "
+"ID providers there are also default regular expressions. See DOMAIN "
+"SECTIONS for more info on these regular expressions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:141 sssd.conf.5.xml:1598
+msgid "full_name_format (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:144
+msgid ""
+"The default <citerefentry> <refentrytitle>printf</refentrytitle> "
+"<manvolnum>3</manvolnum> </citerefentry>-compatible format that describes "
+"how to translate a (name, domain) tuple into a fully qualified name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:152
+msgid ""
+"Each domain can have an individual format string configured. see DOMAIN "
+"SECTIONS for more info on this option."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:158
+msgid "try_inotify (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:161
+msgid ""
+"SSSD monitors the state of resolv.conf to identify when it needs to update "
+"its internal DNS resolver. By default, we will attempt to use inotify for "
+"this, and will fall back to polling resolv.conf every five seconds if "
+"inotify cannot be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:169
+msgid ""
+"There are some limited situations where it is preferred that we should skip "
+"even trying to use inotify. In these rare cases, this option should be set "
+"to 'false'"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:175
+msgid ""
+"Default: true on platforms where inotify is supported. False on other "
+"platforms."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:179
+msgid ""
+"Note: this option will have no effect on platforms where inotify is "
+"unavailable. On these platforms, polling will always be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:186
+msgid "krb5_rcache_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:189
+msgid ""
+"Directory on the filesystem where SSSD should store Kerberos replay cache "
+"files."
+msgstr ""
+"Katalog på filsystemet där SSSD skall lagra sparade återspolningsfiler från "
+"Kerberos."
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:193
+msgid ""
+"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
+"SSSD to let libkrb5 decide the appropriate location for the replay cache."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:199
+msgid ""
+"Default: Distribution-specific and specified at build-time. "
+"(__LIBKRB5_DEFAULTS__ if not configured)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:206
+msgid "default_domain_suffix (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:209
+msgid ""
+"This string will be used as a default domain name for all names without a "
+"domain name component. The main use case is environments where the primary "
+"domain is intended for managing host policies and all users are located in a "
+"trusted domain. The option allows those users to log in just with their "
+"user name without giving a domain name as well."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:219
+msgid ""
+"Please note that if this option is set all users from the primary domain "
+"have to use their fully qualified name, e.g. user@domain.name, to log in."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:225 sssd-ldap.5.xml:1357 sssd-ldap.5.xml:1369
+#: sssd-ldap.5.xml:1430 sssd-ldap.5.xml:2276 sssd-ldap.5.xml:2303
+#: sssd-krb5.5.xml:366 include/ldap_id_mapping.xml:145
+#: include/ldap_id_mapping.xml:156
+msgid "Default: not set"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:64
+msgid ""
+"Individual pieces of SSSD functionality are provided by special SSSD "
+"services that are started and stopped together with SSSD. The services are "
+"managed by a special service frequently called <quote>monitor</quote>. The "
+"<quote>[sssd]</quote> section is used to configure the monitor as well as "
+"some other important options like the identity domains. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:236
+msgid "SERVICES SECTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:238
+msgid ""
+"Settings that can be used to configure different services are described in "
+"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
+"section, for example, for NSS service, the section would be <quote>[nss]</"
+"quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:245
+msgid "General service configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:247
+msgid "These options can be used to configure any service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:251
+msgid "debug_level (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:255
+msgid "debug_timestamps (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:258
+msgid "Add a timestamp to the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:261 sssd.conf.5.xml:441 sssd.conf.5.xml:841
+#: sssd-ldap.5.xml:1503 sssd-ldap.5.xml:1629 sssd-ldap.5.xml:2064
+#: sssd-ldap.5.xml:2129 sssd-ldap.5.xml:2147 sssd-ipa.5.xml:250
+#: sssd-ipa.5.xml:285
+msgid "Default: true"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:266
+msgid "debug_microseconds (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:269
+msgid "Add microseconds to the timestamp in debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:272 sssd.conf.5.xml:795 sssd.conf.5.xml:1705
+#: sssd-ldap.5.xml:640 sssd-ldap.5.xml:1398 sssd-ldap.5.xml:1417
+#: sssd-ldap.5.xml:1572 sssd-ldap.5.xml:1860 sssd-ipa.5.xml:129
+#: sssd-ipa.5.xml:345 sssd-krb5.5.xml:244 sssd-krb5.5.xml:278
+#: sssd-krb5.5.xml:427
+msgid "Default: false"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:277
+msgid "timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:280
+msgid ""
+"Timeout in seconds between heartbeats for this service. This is used to "
+"ensure that the process is alive and capable of answering requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:285 sssd-ldap.5.xml:1269
+msgid "Default: 10"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:303
+msgid "fd_limit"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:306
+msgid ""
+"This option specifies the maximum number of file descriptors that may be "
+"opened at one time by this SSSD process. On systems where SSSD is granted "
+"the CAP_SYS_RESOURCE capability, this will be an absolute setting. On "
+"systems without this capability, the resulting value will be the lower value "
+"of this or the limits.conf \"hard\" limit."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:315
+msgid "Default: 8192 (or limits.conf \"hard\" limit)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:320
+msgid "client_idle_timeout"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:323
+msgid ""
+"This option specifies the number of seconds that a client of an SSSD process "
+"can hold onto a file descriptor without communicating on it. This value is "
+"limited in order to avoid resource exhaustion on the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:330 sssd.conf.5.xml:346 sssd.conf.5.xml:613
+#: sssd.conf.5.xml:773 sssd.conf.5.xml:1009 sssd-ldap.5.xml:1099
+msgid "Default: 60"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:335 sssd.conf.5.xml:998
+msgid "force_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:338 sssd.conf.5.xml:1001
+msgid ""
+"If a service is not responding to ping checks (see the <quote>timeout</"
+"quote> option), it is first sent the SIGTERM signal that instructs it to "
+"quit gracefully. If the service does not terminate after "
+"<quote>force_timeout</quote> seconds, the monitor will forcibly shut it down "
+"by sending a SIGKILL signal."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:354
+msgid "NSS configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:356
+msgid ""
+"These options can be used to configure the Name Service Switch (NSS) service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:361
+msgid "enum_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:364
+msgid ""
+"How many seconds should nss_sss cache enumerations (requests for info about "
+"all users)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:368
+msgid "Default: 120"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:373
+msgid "entry_cache_nowait_percentage (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:376
+msgid ""
+"The entry cache can be set to automatically update entries in the background "
+"if they are requested beyond a percentage of the entry_cache_timeout value "
+"for the domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:382
+msgid ""
+"For example, if the domain's entry_cache_timeout is set to 30s and "
+"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
+"after 15 seconds past the last cache update will be returned immediately, "
+"but the SSSD will go and update the cache on its own, so that future "
+"requests will not need to block waiting for a cache update."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:392
+msgid ""
+"Valid values for this option are 0-99 and represent a percentage of the "
+"entry_cache_timeout for each domain. For performance reasons, this "
+"percentage will never reduce the nowait timeout to less than 10 seconds. (0 "
+"disables this feature)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:400
+msgid "Default: 50"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:405
+msgid "entry_negative_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:408
+msgid ""
+"Specifies for how many seconds nss_sss should cache negative cache hits "
+"(that is, queries for invalid database entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:414 sssd.conf.5.xml:819 sssd-krb5.5.xml:226
+msgid "Default: 15"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:419
+msgid "filter_users, filter_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:422
+msgid ""
+"Exclude certain users from being fetched from the sss NSS database. This is "
+"particularly useful for system accounts. This option can also be set per-"
+"domain or include fully-qualified names to filter only users from the "
+"particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:429
+msgid "Default: root"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:434
+msgid "filter_users_in_groups (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:437
+msgid ""
+"If you want filtered user still be group members set this option to false."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:446 sssd-ad.5.xml:132
+msgid "override_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:455 sssd-ad.5.xml:141 sssd-krb5.5.xml:169
+msgid "%u"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:456 sssd-ad.5.xml:142 sssd-krb5.5.xml:170
+msgid "login name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:459 sssd-ad.5.xml:145 sssd-krb5.5.xml:173
+msgid "%U"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:460 sssd-ad.5.xml:146
+msgid "UID number"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:463 sssd-ad.5.xml:149 sssd-krb5.5.xml:191
+msgid "%d"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:464 sssd-ad.5.xml:150
+msgid "domain name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:467 sssd-ad.5.xml:153
+msgid "%f"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:468 sssd-ad.5.xml:154
+msgid "fully qualified user name (user@domain)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:471
+msgid "%o"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:473
+msgid "The original home directory retrieved from the identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:478 sssd-ad.5.xml:157 sssd-krb5.5.xml:203
+msgid "%%"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:479 sssd-ad.5.xml:158 sssd-krb5.5.xml:204
+msgid "a literal '%'"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:449 sssd-ad.5.xml:135
+msgid ""
+"Override the user's home directory. You can either provide an absolute value "
+"or a template. In the template, the following sequences are substituted: "
+"<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:485 sssd-ad.5.xml:164
+msgid "This option can also be set per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
+#, no-wrap
+msgid ""
+"override_homedir = /home/%u\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:488 sssd.conf.5.xml:512 sssd-ad.5.xml:167 sssd-ad.5.xml:191
+msgid "example: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:494 sssd-ad.5.xml:173
+msgid "Default: Not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:500 sssd-ad.5.xml:179
+msgid "fallback_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:503 sssd-ad.5.xml:182
+msgid ""
+"Set a default template for a user's home directory if one is not specified "
+"explicitly by the domain's data provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:508 sssd-ad.5.xml:187
+msgid ""
+"The available values for this option are the same as for override_homedir."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:518 sssd-ad.5.xml:197
+msgid "Default: not set (no substitution for unset home directories)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:524
+msgid "override_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:527
+msgid ""
+"Override the login shell for all users. This option can be specified "
+"globally in the [nss] section or per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:532
+msgid "Default: not set (SSSD will use the value retrieved from LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:538
+msgid "allowed_shells (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:541
+msgid ""
+"Restrict user shell to one of the listed values. The order of evaluation is:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:544
+msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:548
+msgid ""
+"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
+"quote>, use the value of the shell_fallback parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:553
+msgid ""
+"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
+"shells</quote>, a nologin shell is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:558
+msgid "An empty string for shell is passed as-is to libc."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:561
+msgid ""
+"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
+"that a restart of the SSSD is required in case a new shell is installed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:565
+msgid "Default: Not set. The user shell is automatically used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:570
+msgid "vetoed_shells (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:573
+msgid "Replace any instance of these shells with the shell_fallback"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:578
+msgid "shell_fallback (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:581
+msgid ""
+"The default shell to use if an allowed shell is not installed on the machine."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:585
+msgid "Default: /bin/sh"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:590 sssd-ad.5.xml:203
+msgid "default_shell"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:593 sssd-ad.5.xml:206
+msgid ""
+"The default shell to use if the provider does not return one during lookup. "
+"This option supersedes any other shell options if it takes effect and can be "
+"set either in the [nss] section or per-domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
+msgid ""
+"Default: not set (Return NULL if no shell is specified and rely on libc to "
+"substitute something sensible when necessary, usually /bin/sh)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:606 sssd.conf.5.xml:766
+msgid "get_domains_timeout (int)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:609 sssd.conf.5.xml:769
+msgid ""
+"Specifies time in seconds for which the list of subdomains will be "
+"considered valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:618
+msgid "memcache_timeout (int)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:621
+msgid ""
+"Specifies time in seconds for which records in the in-memory cache will be "
+"valid"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:625 sssd-ldap.5.xml:654
+msgid "Default: 300"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:632
+msgid "PAM configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:634
+msgid ""
+"These options can be used to configure the Pluggable Authentication Module "
+"(PAM) service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:639
+msgid "offline_credentials_expiration (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:642
+msgid ""
+"If the authentication provider is offline, how long should we allow cached "
+"logins (in days since the last successful online login)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:647 sssd.conf.5.xml:660
+msgid "Default: 0 (No limit)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:653
+msgid "offline_failed_login_attempts (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:656
+msgid ""
+"If the authentication provider is offline, how many failed login attempts "
+"are allowed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:666
+msgid "offline_failed_login_delay (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:669
+msgid ""
+"The time in minutes which has to pass after offline_failed_login_attempts "
+"has been reached before a new login attempt is possible."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:674
+msgid ""
+"If set to 0 the user cannot authenticate offline if "
+"offline_failed_login_attempts has been reached. Only a successful online "
+"authentication can enable offline authentication again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:680 sssd.conf.5.xml:733
+msgid "Default: 5"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:686
+msgid "pam_verbosity (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:689
+msgid ""
+"Controls what kind of messages are shown to the user during authentication. "
+"The higher the number to more messages are displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:694
+msgid "Currently sssd supports the following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:697
+msgid "<emphasis>0</emphasis>: do not show any message"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:700
+msgid "<emphasis>1</emphasis>: show only important messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:704
+msgid "<emphasis>2</emphasis>: show informational messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:707
+msgid "<emphasis>3</emphasis>: show all messages and debug information"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:711 sssd.8.xml:63
+msgid "Default: 1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:716
+msgid "pam_id_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:719
+msgid ""
+"For any PAM request while SSSD is online, the SSSD will attempt to "
+"immediately update the cached identity information for the user in order to "
+"ensure that authentication takes place with the latest information."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:725
+msgid ""
+"A complete PAM conversation may perform multiple PAM requests, such as "
+"account management and session opening. This option controls (on a per-"
+"client-application basis) how long (in seconds) we can cache the identity "
+"information to avoid excessive round-trips to the identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:739
+msgid "pam_pwd_expiration_warning (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:742 sssd.conf.5.xml:1159
+msgid "Display a warning N days before the password expires."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:745
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:751 sssd.conf.5.xml:1162
+msgid ""
+"If zero is set, then this filter is not applied, i.e. if the expiration "
+"warning was received from backend server, it will automatically be displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:756
+msgid ""
+"This setting can be overridden by setting <emphasis>pwd_expiration_warning</"
+"emphasis> for a particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:761 sssd.8.xml:79
+msgid "Default: 0"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:781
+msgid "SUDO configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:783
+msgid "These options can be used to configure the sudo service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:787
+msgid "sudo_timed (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:790
+msgid ""
+"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
+"that implement time-dependent sudoers entries."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:803
+msgid "AUTOFS configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:805
+msgid "These options can be used to configure the autofs service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:809
+msgid "autofs_negative_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:812
+msgid ""
+"Specifies for how many seconds should the autofs responder negative cache "
+"hits (that is, queries for invalid map entries, like nonexistent ones) "
+"before asking the back end again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:828
+msgid "SSH configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:830
+msgid "These options can be used to configure the SSH service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:834
+msgid "ssh_hash_known_hosts (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:837
+msgid ""
+"Whether or not to hash host names and addresses in the managed known_hosts "
+"file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:846
+msgid "ssh_known_hosts_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:849
+msgid ""
+"How many seconds to keep a host in the managed known_hosts file after its "
+"host keys were requested."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:853
+msgid "Default: 180"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:861
+msgid "PAC responder configuration options"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:863
+msgid ""
+"The PAC responder works together with the authorization data plugin for MIT "
+"Kerberos sssd_pac_plugin.so and a sub-domain provider. The plugin sends the "
+"PAC data during a GSSAPI authentication to the PAC responder. The sub-domain "
+"provider collects domain SID and ID ranges of the domain the client is "
+"joined to and of remote trusted domains from the local domain controller. "
+"If the PAC is decoded and evaluated some of the following operations are "
+"done:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:872
+msgid ""
+"If the remote user does not exist in the cache, it is created. The uid is "
+"calculated based on the SID, trusted domains will have UPGs and the gid will "
+"have the same value as the uid. The home directory is set based on the "
+"subdomain_homedir parameter. The shell will be empty by default, i.e. the "
+"system defaults are used, but can be overwritten with the default_shell "
+"parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:880
+msgid ""
+"If there are SIDs of groups from the domain the sssd client belongs to, the "
+"user will be added to those groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:886
+msgid "These options can be used to configure the PAC responder."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:890
+msgid "allowed_uids (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:893
+msgid ""
+"Specifies the comma-separated list of UID values or user names that are "
+"allowed to access the PAC responder. User names are resolved to UIDs at "
+"startup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:899
+msgid "Default: 0 (only the root user is allowed to access the PAC responder)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:903
+msgid ""
+"Please note that although the UID 0 is used as the default it will be "
+"overwritten with this option. If you still want to allow the root user to "
+"access the PAC responder, which would be the typical case, you have to add 0 "
+"to the list of allowed UIDs as well."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:917
+msgid "DOMAIN SECTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:924
+msgid "min_id,max_id (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:927
+msgid ""
+"UID and GID limits for the domain. If a domain contains an entry that is "
+"outside these limits, it is ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:932
+msgid ""
+"For users, this affects the primary GID limit. The user will not be returned "
+"to NSS if either the UID or the primary GID is outside the range. For non-"
+"primary group memberships, those that are in range will be reported as "
+"expected."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:939
+msgid ""
+"These ID limits affect even saving entries to cache, not only returning them "
+"by name or ID."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:943
+msgid "Default: 1 for min_id, 0 (no limit) for max_id"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:949
+msgid "enumerate (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:952
+msgid ""
+"Determines if a domain can be enumerated. This parameter can have one of the "
+"following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:956
+msgid "TRUE = Users and groups are enumerated"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:959
+msgid "FALSE = No enumerations for this domain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:962 sssd.conf.5.xml:1136 sssd.conf.5.xml:1238
+#: sssd.conf.5.xml:1255
+msgid "Default: FALSE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:965
+msgid ""
+"Note: Enabling enumeration has a moderate performance impact on SSSD while "
+"enumeration is running. It may take up to several minutes after SSSD startup "
+"to fully complete enumerations. During this time, individual requests for "
+"information will go directly to LDAP, though it may be slow, due to the "
+"heavy enumeration processing. Saving a large number of entries to cache "
+"after the enumeration completes might also be CPU intensive as the "
+"memberships have to be recomputed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:978
+msgid ""
+"While the first enumeration is running, requests for the complete user or "
+"group lists may return no results until it completes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:983
+msgid ""
+"Further, enabling enumeration may increase the time necessary to detect "
+"network disconnection, as longer timeouts are required to ensure that "
+"enumeration lookups are completed successfully. For more information, refer "
+"to the man pages for the specific id_provider in use."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:991
+msgid ""
+"For the reasons cited above, enabling enumeration is not recommended, "
+"especially in large environments."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1015
+msgid "entry_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1018
+msgid ""
+"How many seconds should nss_sss consider entries valid before asking the "
+"backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1022
+msgid "Default: 5400"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1028
+msgid "entry_cache_user_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1031
+msgid ""
+"How many seconds should nss_sss consider user entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1035 sssd.conf.5.xml:1048 sssd.conf.5.xml:1061
+#: sssd.conf.5.xml:1074 sssd.conf.5.xml:1087 sssd.conf.5.xml:1101
+msgid "Default: entry_cache_timeout"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1041
+msgid "entry_cache_group_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1044
+msgid ""
+"How many seconds should nss_sss consider group entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1054
+msgid "entry_cache_netgroup_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1057
+msgid ""
+"How many seconds should nss_sss consider netgroup entries valid before "
+"asking the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1067
+msgid "entry_cache_service_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1070
+msgid ""
+"How many seconds should nss_sss consider service entries valid before asking "
+"the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1080
+msgid "entry_cache_sudo_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1083
+msgid ""
+"How many seconds should sudo consider rules valid before asking the backend "
+"again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1093
+msgid "entry_cache_autofs_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1096
+msgid ""
+"How many seconds should the autofs service consider automounter maps valid "
+"before asking the backend again"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1107
+msgid "refresh_expired_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1110
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing expired "
+"records. Currently only refreshing expired netgroups is supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1115
+msgid "You can consider setting this value to 3/4 * entry_cache_timeout."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1119
+msgid "Default: 0 (disabled)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1125
+msgid "cache_credentials (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1128
+msgid "Determines if user credentials are also cached in the local LDB cache"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1132
+msgid "User credentials are stored in a SHA512 hash, not in plaintext"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1141
+msgid "account_cache_expiration (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1144
+msgid ""
+"Number of days entries are left in cache after last successful login before "
+"being removed during a cleanup of the cache. 0 means keep forever. The "
+"value of this parameter must be greater than or equal to "
+"offline_credentials_expiration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1151
+msgid "Default: 0 (unlimited)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1156
+msgid "pwd_expiration_warning (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1167
+msgid ""
+"Please note that the backend server has to provide information about the "
+"expiration time of the password. If this information is missing, sssd "
+"cannot display a warning. Also an auth provider has to be configured for the "
+"backend."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1174
+msgid "Default: 7 (Kerberos), 0 (LDAP)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1180
+msgid "id_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1183
+msgid ""
+"The identification provider used for the domain. Supported ID providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1187
+msgid "proxy: Support a legacy NSS provider"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1190
+msgid "<quote>local</quote>: SSSD internal provider for local users"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1194
+msgid ""
+"<quote>ldap</quote>: LDAP provider. See <citerefentry> <refentrytitle>sssd-"
+"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more "
+"information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1202 sssd.conf.5.xml:1281 sssd.conf.5.xml:1332
+#: sssd.conf.5.xml:1385
+msgid ""
+"<quote>ipa</quote>: FreeIPA and Red Hat Enterprise Identity Management "
+"provider. See <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
+"FreeIPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1211 sssd.conf.5.xml:1290 sssd.conf.5.xml:1341
+#: sssd.conf.5.xml:1394
+msgid ""
+"<quote>ad</quote>: Active Directory provider. See <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Active Directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1222
+msgid "use_fully_qualified_names (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1225
+msgid ""
+"Use the full name and domain (as formatted by the domain's full_name_format) "
+"as the user's login name reported to NSS."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1230
+msgid ""
+"If set to TRUE, all requests to this domain must use fully qualified names. "
+"For example, if used in LOCAL domain that contains a \"test\" user, "
+"<command>getent passwd test</command> wouldn't find the user while "
+"<command>getent passwd test@LOCAL</command> would."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1243
+msgid "ignore_group_members (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1246
+msgid "Do not return group members for group lookups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1249
+msgid ""
+"If set to TRUE, the group membership attribute is not requested from the "
+"ldap server, and group members are not returned when processing group lookup "
+"calls."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1260
+msgid "auth_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1263
+msgid ""
+"The authentication provider used for the domain. Supported auth providers "
+"are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1267 sssd.conf.5.xml:1325
+msgid ""
+"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1274
+msgid ""
+"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1298
+msgid ""
+"<quote>proxy</quote> for relaying authentication to some other PAM target."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1301
+msgid "<quote>none</quote> disables authentication explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1304
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"authentication requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1310
+msgid "access_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1313
+msgid ""
+"The access control provider used for the domain. There are two built-in "
+"access providers (in addition to any included in installed backends) "
+"Internal special providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1319
+msgid ""
+"<quote>permit</quote> always allow access. It's the only permitted access "
+"provider for a local domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1322
+msgid "<quote>deny</quote> always deny access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1349
+msgid ""
+"<quote>simple</quote> access control based on access or deny lists. See "
+"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry> for more information on configuring the simple "
+"access module."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1356
+msgid "Default: <quote>permit</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1361
+msgid "chpass_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1364
+msgid ""
+"The provider which should handle change password operations for the domain. "
+"Supported change password providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1369
+msgid ""
+"<quote>ldap</quote> to change a password stored in a LDAP server. See "
+"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1377
+msgid ""
+"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
+"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring Kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1402
+msgid ""
+"<quote>proxy</quote> for relaying password changes to some other PAM target."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1406
+msgid "<quote>none</quote> disallows password changes explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1409
+msgid ""
+"Default: <quote>auth_provider</quote> is used if it is set and can handle "
+"change password requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1416
+msgid "sudo_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1419
+msgid "The SUDO provider used for the domain. Supported SUDO providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1423
+msgid ""
+"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1430
+msgid "<quote>none</quote> disables SUDO explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1433 sssd.conf.5.xml:1487 sssd.conf.5.xml:1519
+#: sssd.conf.5.xml:1544
+msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1439
+msgid "selinux_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1442
+msgid ""
+"The provider which should handle loading of selinux settings. Note that this "
+"provider will be called right after access provider ends. Supported selinux "
+"providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1448
+msgid ""
+"<quote>ipa</quote> to load selinux settings from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1456
+msgid "<quote>none</quote> disallows fetching selinux settings explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1459
+msgid ""
+"Default: <quote>id_provider</quote> is used if it is set and can handle "
+"selinux loading requests."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1465
+msgid "subdomains_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1468
+msgid ""
+"The provider which should handle fetching of subdomains. This value should "
+"be always the same as id_provider. Supported subdomain providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1474
+msgid ""
+"<quote>ipa</quote> to load a list of subdomains from an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1483
+msgid "<quote>none</quote> disallows fetching subdomains explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1494
+msgid "autofs_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1497
+msgid ""
+"The autofs provider used for the domain. Supported autofs providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1501
+msgid ""
+"<quote>ldap</quote> to load maps stored in LDAP. See <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1508
+msgid ""
+"<quote>ipa</quote> to load maps stored in an IPA server. See <citerefentry> "
+"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1516
+msgid "<quote>none</quote> disables autofs explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1526
+msgid "hostid_provider (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1529
+msgid ""
+"The provider used for retrieving host identity information. Supported "
+"hostid providers are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1533
+msgid ""
+"<quote>ipa</quote> to load host identity stored in an IPA server. See "
+"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> for more information on configuring IPA."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1541
+msgid "<quote>none</quote> disables hostid explicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1554
+msgid ""
+"Regular expression for this domain that describes how to parse the string "
+"containing user name and domain into these components."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1559
+msgid ""
+"Default for the AD and IPA provider: <quote>(((?P&lt;domain&gt;[^\\\\]+)\\"
+"\\(?P&lt;name&gt;.+$))|((?P&lt;name&gt;[^@]+)@(?P&lt;domain&gt;.+$))|(^(?"
+"P&lt;name&gt;[^@\\\\]+)$))</quote> which allows three different styles for "
+"user names:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1564
+msgid "username"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1567
+msgid "username@domain.name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:1570
+msgid "domain\\username"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1573
+msgid ""
+"While the first two correspond to the general default the third one is "
+"introduced to allow easy integration of users from Windows domains."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1578
+msgid ""
+"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
+"which translates to \"the name is everything up to the <quote>@</quote> "
+"sign, the domain everything after that\""
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1584
+msgid ""
+"PLEASE NOTE: the support for non-unique named subpatterns is not available "
+"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
+"version 7 or higher can support non-unique named subpatterns."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1591
+msgid ""
+"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
+"P&lt;name&gt;) to label subpatterns."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1601
+msgid ""
+"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
+"manvolnum> </citerefentry>-compatible format that describes how to translate "
+"a (name, domain) tuple for this domain into a fully qualified name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1609
+msgid "Default: <quote>%1$s@%2$s</quote>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1615
+msgid "lookup_family_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1618
+msgid ""
+"Provides the ability to select preferred address family to use when "
+"performing DNS lookups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1622
+msgid "Supported values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1625
+msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1628
+msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1631
+msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1634
+msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1637
+msgid "Default: ipv4_first"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1643
+msgid "dns_resolver_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1646
+msgid ""
+"Defines the amount of time (in seconds) to wait for a reply from the DNS "
+"resolver before assuming that it is unreachable. If this timeout is reached, "
+"the domain will continue to operate in offline mode."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1652 sssd-ldap.5.xml:1083 sssd-ldap.5.xml:1125
+#: sssd-ldap.5.xml:1140
+msgid "Default: 6"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1658
+msgid "dns_discovery_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1661
+msgid ""
+"If service discovery is used in the back end, specifies the domain part of "
+"the service discovery DNS query."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1665
+msgid "Default: Use the domain part of machine's hostname"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1671
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1674
+msgid "Override the primary GID value with the one specified."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1680
+msgid "case_sensitive (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1683
+msgid ""
+"Treat user and group names as case sensitive. At the moment, this option is "
+"not supported in the local provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1688
+msgid "Default: True"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1694
+msgid "proxy_fast_alias (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1697
+msgid ""
+"When a user or group is looked up by name in the proxy provider, a second "
+"lookup by ID is performed to \"canonicalize\" the name in case the requested "
+"name was an alias. Setting this option to true would cause the SSSD to "
+"perform the ID lookup from cache for performance reasons."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1711
+msgid "subdomain_homedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1714
+msgid ""
+"Use this homedir as default value for all subdomains within this domain. See "
+"<emphasis>override_homedir</emphasis> for info about possible values."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1719
+msgid ""
+"The value can be overridden by <emphasis>override_homedir</emphasis> option."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1723
+msgid "Default: <filename>/home/%d/%u</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:919
+msgid ""
+"These configuration options can be present in a domain configuration "
+"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
+"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1735
+msgid "proxy_pam_target (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1738
+msgid "The proxy target PAM proxies to."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1741
+msgid ""
+"Default: not set by default, you have to take an existing pam configuration "
+"or create a new one and add the service name here."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1749
+msgid "proxy_lib_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1752
+msgid ""
+"The name of the NSS library to use in proxy domains. The NSS functions "
+"searched for in the library are in the form of _nss_$(libName)_$(function), "
+"for example _nss_files_getpwent."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1731
+msgid ""
+"Options valid for proxy domains. <placeholder type=\"variablelist\" id="
+"\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><title>
+#: sssd.conf.5.xml:1764
+msgid "The local domain section"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><para>
+#: sssd.conf.5.xml:1766
+msgid ""
+"This section contains settings for domain that stores users and groups in "
+"SSSD native database, that is, a domain that uses "
+"<replaceable>id_provider=local</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1773
+msgid "default_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1776
+msgid "The default shell for users created with SSSD userspace tools."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1780
+msgid "Default: <filename>/bin/bash</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1785
+msgid "base_directory (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1788
+msgid ""
+"The tools append the login name to <replaceable>base_directory</replaceable> "
+"and use that as the home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1793
+msgid "Default: <filename>/home</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1798
+msgid "create_homedir (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1801
+msgid ""
+"Indicate if a home directory should be created by default for new users. "
+"Can be overridden on command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1805 sssd.conf.5.xml:1817
+msgid "Default: TRUE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1810
+msgid "remove_homedir (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1813
+msgid ""
+"Indicate if a home directory should be removed by default for deleted "
+"users. Can be overridden on command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1822
+msgid "homedir_umask (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1825
+msgid ""
+"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
+"on a newly created home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1833
+msgid "Default: 077"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1838
+msgid "skel_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1841
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1851
+msgid "Default: <filename>/etc/skel</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1856
+msgid "mail_dir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1859
+msgid ""
+"The mail spool directory. This is needed to manipulate the mailbox when its "
+"corresponding user account is modified or deleted. If not specified, a "
+"default value is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1866
+msgid "Default: <filename>/var/mail</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:1871
+msgid "userdel_cmd (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1874
+msgid ""
+"The command that is run after a user is removed. The command us passed the "
+"username of the user being removed as the first and only parameter. The "
+"return code of the command is not taken into account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1880
+msgid "Default: None, no command is run"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.conf.5.xml:1890 sssd-ldap.5.xml:2329 sssd-simple.5.xml:131
+#: sssd-ipa.5.xml:612 sssd-ad.5.xml:229 sssd-krb5.5.xml:441
+msgid "EXAMPLE"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd.conf.5.xml:1896
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"domains = LDAP\n"
+"services = nss, pam\n"
+"config_file_version = 2\n"
+"\n"
+"[nss]\n"
+"filter_groups = root\n"
+"filter_users = root\n"
+"\n"
+"[pam]\n"
+"\n"
+"[domain/LDAP]\n"
+"id_provider = ldap\n"
+"ldap_uri = ldap://ldap.example.com\n"
+"ldap_search_base = dc=example,dc=com\n"
+"\n"
+"auth_provider = krb5\n"
+"krb5_server = kerberos.example.com\n"
+"krb5_realm = EXAMPLE.COM\n"
+"cache_credentials = true\n"
+"\n"
+"min_id = 10000\n"
+"max_id = 20000\n"
+"enumerate = False\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.conf.5.xml:1892
+msgid ""
+"The following example shows a typical SSSD config. It does not describe "
+"configuration of the domains themselves - refer to documentation on "
+"configuring domains for more details. <placeholder type=\"programlisting\" "
+"id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
+msgid "sssd-ldap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:23
+msgid ""
+"This manual page describes the configuration of LDAP domains for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. Refer to the <quote>FILE FORMAT</quote> section of the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for detailed syntax information."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:35
+msgid "You can configure SSSD to use more than one LDAP domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:38
+msgid ""
+"LDAP back end supports id, auth, access and chpass providers. If you want to "
+"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
+"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
+"over an unencrypted channel. If the LDAP server is used only as an identity "
+"provider, an encrypted channel is not needed. Please refer to "
+"<quote>ldap_access_filter</quote> config option for more information about "
+"using LDAP as an access provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:70 sssd-ad.5.xml:75
+#: sssd-krb5.5.xml:63
+msgid "CONFIGURATION OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:60
+msgid "ldap_uri, ldap_backup_uri (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:63
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference. Refer to the <quote>FAILOVER</"
+"quote> section for more information on failover and server redundancy. If "
+"neither option is specified, service discovery is enabled. For more "
+"information, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:70
+msgid "The format of the URI must match the format defined in RFC 2732:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:73
+msgid "ldap[s]://&lt;host&gt;[:port]"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:76
+msgid ""
+"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:79
+msgid "example: ldap://[fc00::126:25]:389"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:85
+msgid "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:88
+msgid ""
+"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
+"should connect in the order of preference to change the password of a user. "
+"Refer to the <quote>FAILOVER</quote> section for more information on "
+"failover and server redundancy."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:95
+msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:99
+msgid "Default: empty, i.e. ldap_uri is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:105
+msgid "ldap_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:108
+msgid "The default base DN to use for performing LDAP user operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:112
+msgid ""
+"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
+"syntax:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:116
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:119
+msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:122
+msgid ""
+"The filter must be a valid LDAP search filter as specified by http://www."
+"ietf.org/rfc/rfc2254.txt"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:126
+msgid "Examples:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:129
+msgid ""
+"ldap_search_base = dc=example,dc=com (which is equivalent to) "
+"ldap_search_base = dc=example,dc=com?subtree?"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:134
+msgid ""
+"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
+"(host=thishost)?dc=example.com?subtree?"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:137
+msgid ""
+"Note: It is unsupported to have multiple search bases which reference "
+"identically-named objects (for example, groups with the same name in two "
+"different search bases). This will lead to unpredictable behavior on client "
+"machines."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:144
+msgid ""
+"Default: If not set, the value of the defaultNamingContext or namingContexts "
+"attribute from the RootDSE of the LDAP server is used. If "
+"defaultNamingContext does not exist or has an empty value namingContexts is "
+"used. The namingContexts attribute must have a single value with the DN of "
+"the search base of the LDAP server to make this work. Multiple values are "
+"are not supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:158
+msgid "ldap_schema (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:161
+msgid ""
+"Specifies the Schema Type in use on the target LDAP server. Depending on "
+"the selected schema, the default attribute names retrieved from the servers "
+"may vary. The way that some attributes are handled may also differ."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:168
+msgid "Four schema types are currently supported:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:172
+msgid "rfc2307"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:177
+msgid "rfc2307bis"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:182
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd-ldap.5.xml:187
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:193
+msgid ""
+"The main difference between these schema types is how group memberships are "
+"recorded in the server. With rfc2307, group members are listed by name in "
+"the <emphasis>memberUid</emphasis> attribute. With rfc2307bis and IPA, "
+"group members are listed by DN and stored in the <emphasis>member</emphasis> "
+"attribute. The AD schema type sets the attributes to correspond with Active "
+"Directory 2008r2 values."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:203
+msgid "Default: rfc2307"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:209
+msgid "ldap_default_bind_dn (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:212
+msgid "The default bind DN to use for performing LDAP operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:219
+msgid "ldap_default_authtok_type (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:222
+msgid "The type of the authentication token of the default bind DN."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:226
+msgid "The two mechanisms currently supported are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:229
+msgid "password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:232
+msgid "obfuscated_password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:235
+msgid "Default: password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:241
+msgid "ldap_default_authtok (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:244
+msgid ""
+"The authentication token of the default bind DN. Only clear text passwords "
+"are currently supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:251
+msgid "ldap_user_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:254
+msgid "The object class of a user entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:257
+msgid "Default: posixAccount"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:263
+msgid "ldap_user_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:266
+msgid "The LDAP attribute that corresponds to the user's login name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:270
+msgid "Default: uid"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:276
+msgid "ldap_user_uid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:279
+msgid "The LDAP attribute that corresponds to the user's id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:283
+msgid "Default: uidNumber"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:289
+msgid "ldap_user_gid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:292
+msgid "The LDAP attribute that corresponds to the user's primary group id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:296 sssd-ldap.5.xml:778
+msgid "Default: gidNumber"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:302
+msgid "ldap_user_gecos (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:305
+msgid "The LDAP attribute that corresponds to the user's gecos field."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:309
+msgid "Default: gecos"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:315
+msgid "ldap_user_home_directory (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:318
+msgid "The LDAP attribute that contains the name of the user's home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:322
+msgid "Default: homeDirectory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:328
+msgid "ldap_user_shell (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:331
+msgid "The LDAP attribute that contains the path to the user's default shell."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:335
+msgid "Default: loginShell"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:341
+msgid "ldap_user_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:344
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:348 sssd-ldap.5.xml:804 sssd-ldap.5.xml:990
+msgid "Default: nsUniqueId"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:354
+msgid "ldap_user_objectsid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:357
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP user object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:362 sssd-ldap.5.xml:818
+msgid "Default: objectSid for ActiveDirectory, not set for other servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:369
+msgid "ldap_user_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:372 sssd-ldap.5.xml:828 sssd-ldap.5.xml:999
+msgid ""
+"The LDAP attribute that contains timestamp of the last modification of the "
+"parent object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:376 sssd-ldap.5.xml:832 sssd-ldap.5.xml:1006
+msgid "Default: modifyTimestamp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:382
+msgid "ldap_user_shadow_last_change (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:385
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
+"the last password change)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:395
+msgid "Default: shadowLastChange"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:401
+msgid "ldap_user_shadow_min (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:404
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
+"password age)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:413
+msgid "Default: shadowMin"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:419
+msgid "ldap_user_shadow_max (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:422
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
+"password age)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:431
+msgid "Default: shadowMax"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:437
+msgid "ldap_user_shadow_warning (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:440
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password warning period)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:450
+msgid "Default: shadowWarning"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:456
+msgid "ldap_user_shadow_inactive (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:459
+msgid ""
+"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
+"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
+"(password inactivity period)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:469
+msgid "Default: shadowInactive"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:475
+msgid "ldap_user_shadow_expire (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:478
+msgid ""
+"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
+"parameter contains the name of an LDAP attribute corresponding to its "
+"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> counterpart (account expiration date)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:488
+msgid "Default: shadowExpire"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:494
+msgid "ldap_user_krb_last_pwd_change (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:497
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time of last password change in "
+"kerberos."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:503
+msgid "Default: krbLastPwdChange"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:509
+msgid "ldap_user_krb_password_expiration (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:512
+msgid ""
+"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
+"an LDAP attribute storing the date and time when current password expires."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:518
+msgid "Default: krbPasswordExpiration"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:524
+msgid "ldap_user_ad_account_expires (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:527
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the expiration time of the account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:532
+msgid "Default: accountExpires"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:538
+msgid "ldap_user_ad_user_account_control (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:541
+msgid ""
+"When using ldap_account_expire_policy=ad, this parameter contains the name "
+"of an LDAP attribute storing the user account control bit field."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:546
+msgid "Default: userAccountControl"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:552
+msgid "ldap_ns_account_lock (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:555
+msgid ""
+"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
+"determines if access is allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:560
+msgid "Default: nsAccountLock"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:566
+msgid "ldap_user_nds_login_disabled (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:569
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines if "
+"access is allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:573 sssd-ldap.5.xml:587
+msgid "Default: loginDisabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:579
+msgid "ldap_user_nds_login_expiration_time (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:582
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines until "
+"which date access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:593
+msgid "ldap_user_nds_login_allowed_time_map (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:596
+msgid ""
+"When using ldap_account_expire_policy=nds, this attribute determines the "
+"hours of a day in a week when access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:601
+msgid "Default: loginAllowedTimeMap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:607
+msgid "ldap_user_principal (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:610
+msgid ""
+"The LDAP attribute that contains the user's Kerberos User Principal Name "
+"(UPN)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:614
+msgid "Default: krbPrincipalName"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:620
+msgid "ldap_user_ssh_public_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:623
+msgid "The LDAP attribute that contains the user's SSH public keys."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:630
+msgid "ldap_force_upper_case_realm (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:633
+msgid ""
+"Some directory servers, for example Active Directory, might deliver the "
+"realm part of the UPN in lower case, which might cause the authentication to "
+"fail. Set this option to a non-zero value if you want to use an upper-case "
+"realm."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:646
+msgid "ldap_enumeration_refresh_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:649
+msgid ""
+"Specifies how many seconds SSSD has to wait before refreshing its cache of "
+"enumerated records."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:660
+msgid "ldap_purge_cache_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:663
+msgid ""
+"Determine how often to check the cache for inactive entries (such as groups "
+"with no members and users who have never logged in) and remove them to save "
+"space."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:669
+msgid "Setting this option to zero will disable the cache cleanup operation."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:673
+msgid "Default: 10800 (12 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:679
+msgid "ldap_user_fullname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:682
+msgid "The LDAP attribute that corresponds to the user's full name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:686 sssd-ldap.5.xml:765 sssd-ldap.5.xml:940
+#: sssd-ldap.5.xml:1031 sssd-ldap.5.xml:1893 sssd-ldap.5.xml:2219
+#: sssd-ipa.5.xml:467
+msgid "Default: cn"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:692
+msgid "ldap_user_member_of (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:695
+msgid "The LDAP attribute that lists the user's group memberships."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:699 sssd-ipa.5.xml:371
+msgid "Default: memberOf"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:705
+msgid "ldap_user_authorized_service (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:708
+msgid ""
+"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
+"use the presence of the authorizedService attribute in the user's LDAP entry "
+"to determine access privilege."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:715
+msgid ""
+"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
+"explicit allow (svc) and finally for allow_all (*)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:720
+msgid "Default: authorizedService"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:726
+msgid "ldap_user_authorized_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:729
+msgid ""
+"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
+"presence of the host attribute in the user's LDAP entry to determine access "
+"privilege."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:735
+msgid ""
+"An explicit deny (!host) is resolved first. Second, SSSD searches for "
+"explicit allow (host) and finally for allow_all (*)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:740
+msgid "Default: host"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:746
+msgid "ldap_group_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:749
+msgid "The object class of a group entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:752
+msgid "Default: posixGroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:758
+msgid "ldap_group_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:761
+msgid "The LDAP attribute that corresponds to the group name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:771
+msgid "ldap_group_gid_number (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:774
+msgid "The LDAP attribute that corresponds to the group's id."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:784
+msgid "ldap_group_member (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:787
+msgid "The LDAP attribute that contains the names of the group's members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:791
+msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:797
+msgid "ldap_group_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:800
+msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:810
+msgid "ldap_group_objectsid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:813
+msgid ""
+"The LDAP attribute that contains the objectSID of an LDAP group object. This "
+"is usually only necessary for ActiveDirectory servers."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:825
+msgid "ldap_group_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:838
+msgid "ldap_group_nesting_level (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:841
+msgid ""
+"If ldap_schema is set to a schema format that supports nested groups (e.g. "
+"RFC2307bis), then this option controls how many levels of nesting SSSD will "
+"follow. This option has no effect on the RFC2307 schema."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:848
+msgid "Default: 2"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:854
+msgid "ldap_groups_use_matching_rule_in_chain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:857
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which may speed up group lookup operations on deployments with "
+"complex or deep nested groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:863
+msgid ""
+"In most common cases, it is best to leave this option disabled. It generally "
+"only provides a performance increase on very complex nestings."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:868 sssd-ldap.5.xml:895
+msgid ""
+"If this option is enabled, SSSD will use it if it detects that the server "
+"supports it during initial connection. So \"True\" here essentially means "
+"\"auto-detect\"."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:874 sssd-ldap.5.xml:901
+msgid ""
+"Note: This feature is currently known to work only with Active Directory "
+"2008 R1 and later. See <ulink url=\"http://msdn.microsoft.com/en-us/library/"
+"windows/desktop/aa746475%28v=vs.85%29.aspx\"> MSDN(TM) documentation</ulink> "
+"for more details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:880 sssd-ldap.5.xml:907 sssd-ldap.5.xml:1198
+#: sssd-ldap.5.xml:1219 sssd-ldap.5.xml:1671 include/ldap_id_mapping.xml:184
+msgid "Default: False"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:886
+msgid "ldap_initgroups_use_matching_rule_in_chain"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:889
+msgid ""
+"This option tells SSSD to take advantage of an Active Directory-specific "
+"feature which might speed up initgroups operations (most notably when "
+"dealing with complex or deep nested groups)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:913
+msgid "ldap_netgroup_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:916
+msgid "The object class of a netgroup entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:919
+msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:923
+msgid "Default: nisNetgroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:929
+msgid "ldap_netgroup_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:932
+msgid "The LDAP attribute that corresponds to the netgroup name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:936
+msgid "In IPA provider, ipa_netgroup_name should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:946
+msgid "ldap_netgroup_member (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:949
+msgid "The LDAP attribute that contains the names of the netgroup's members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:953
+msgid "In IPA provider, ipa_netgroup_member should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:957
+msgid "Default: memberNisNetgroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:963
+msgid "ldap_netgroup_triple (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:966
+msgid ""
+"The LDAP attribute that contains the (host, user, domain) netgroup triples."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:970 sssd-ldap.5.xml:1003
+msgid "This option is not available in IPA provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:973
+msgid "Default: nisNetgroupTriple"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:979
+msgid "ldap_netgroup_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:982
+msgid ""
+"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:986
+msgid "In IPA provider, ipa_netgroup_uuid should be used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:996
+msgid "ldap_netgroup_modify_timestamp (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1012
+msgid "ldap_service_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1015
+msgid "The object class of a service entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1018
+msgid "Default: ipService"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1024
+msgid "ldap_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1027
+msgid ""
+"The LDAP attribute that contains the name of service attributes and their "
+"aliases."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1037
+msgid "ldap_service_port (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1040
+msgid "The LDAP attribute that contains the port managed by this service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1044
+msgid "Default: ipServicePort"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1050
+msgid "ldap_service_proto (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1053
+msgid ""
+"The LDAP attribute that contains the protocols understood by this service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1057
+msgid "Default: ipServiceProtocol"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1063
+msgid "ldap_service_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1068
+msgid "ldap_search_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1071
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches are allowed to run "
+"before they are cancelled and cached results are returned (and offline mode "
+"is entered)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1077
+msgid ""
+"Note: this option is subject to change in future versions of the SSSD. It "
+"will likely be replaced at some point by a series of timeouts for specific "
+"lookup types."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1089
+msgid "ldap_enumeration_search_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1092
+msgid ""
+"Specifies the timeout (in seconds) that ldap searches for user and group "
+"enumerations are allowed to run before they are cancelled and cached results "
+"are returned (and offline mode is entered)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1105
+msgid "ldap_network_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1108
+msgid ""
+"Specifies the timeout (in seconds) after which the <citerefentry> "
+"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
+"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
+"manvolnum> </citerefentry> following a <citerefentry> "
+"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
+"citerefentry> returns in case of no activity."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1131
+msgid "ldap_opt_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1134
+msgid ""
+"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
+"will abort if no response is received. Also controls the timeout when "
+"communicating with the KDC in case of SASL bind."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1146
+msgid "ldap_connection_expire_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1149
+msgid ""
+"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
+"maintained. After this time, the connection will be re-established. If used "
+"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
+"the TGT lifetime) will be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1157 sssd-ldap.5.xml:2050
+msgid "Default: 900 (15 minutes)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1163
+msgid "ldap_page_size (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1166
+msgid ""
+"Specify the number of records to retrieve from LDAP in a single request. "
+"Some LDAP servers enforce a maximum limit per-request."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1171
+msgid "Default: 1000"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1177
+msgid "ldap_disable_paging (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1180
+msgid ""
+"Disable the LDAP paging control. This option should be used if the LDAP "
+"server reports that it supports the LDAP paging control in its RootDSE but "
+"it is not enabled or does not behave properly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1186
+msgid ""
+"Example: OpenLDAP servers with the paging control module installed on the "
+"server but not enabled will report it in the RootDSE but be unable to use it."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1192
+msgid ""
+"Example: 389 DS has a bug where it can only support a one paging control at "
+"a time on a single connection. On busy clients, this can result in some "
+"requests being denied."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1204
+msgid "ldap_disable_range_retrieval (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1207
+msgid "Disable Active Directory range retrieval."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1210
+msgid ""
+"Active Directory limits the number of members to be retrieved in a single "
+"lookup using the MaxValRange policy (which defaults to 1500 members). If a "
+"group contains more members, the reply would include an AD-specific range "
+"extension. This option disables parsing of the range extension, therefore "
+"large groups will appear as having no members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1225
+msgid "ldap_sasl_minssf (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1228
+msgid ""
+"When communicating with an LDAP server using SASL, specify the minimum "
+"security level necessary to establish the connection. The values of this "
+"option are defined by OpenLDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1234
+msgid "Default: Use the system default (usually specified by ldap.conf)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1241
+msgid "ldap_deref_threshold (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1244
+msgid ""
+"Specify the number of group members that must be missing from the internal "
+"cache in order to trigger a dereference lookup. If less members are missing, "
+"they are looked up individually."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1250
+msgid ""
+"You can turn off dereference lookups completely by setting the value to 0."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1254
+msgid ""
+"A dereference lookup is a means of fetching all group members in a single "
+"LDAP call. Different LDAP servers may implement different dereference "
+"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
+"Directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1262
+msgid ""
+"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
+"filter, then the dereference lookup performance enhancement will be disabled "
+"regardless of this setting."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1275
+msgid "ldap_tls_reqcert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1278
+msgid ""
+"Specifies what checks to perform on server certificates in a TLS session, if "
+"any. It can be specified as one of the following values:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1284
+msgid ""
+"<emphasis>never</emphasis> = The client will not request or check any server "
+"certificate."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1288
+msgid ""
+"<emphasis>allow</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, it will be ignored and the session proceeds normally."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1295
+msgid ""
+"<emphasis>try</emphasis> = The server certificate is requested. If no "
+"certificate is provided, the session proceeds normally. If a bad certificate "
+"is provided, the session is immediately terminated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1301
+msgid ""
+"<emphasis>demand</emphasis> = The server certificate is requested. If no "
+"certificate is provided, or a bad certificate is provided, the session is "
+"immediately terminated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1307
+msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1311
+msgid "Default: hard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1317
+msgid "ldap_tls_cacert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1320
+msgid ""
+"Specifies the file that contains certificates for all of the Certificate "
+"Authorities that <command>sssd</command> will recognize."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1325 sssd-ldap.5.xml:1343 sssd-ldap.5.xml:1384
+msgid ""
+"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
+"conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1332
+msgid "ldap_tls_cacertdir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1335
+msgid ""
+"Specifies the path of a directory that contains Certificate Authority "
+"certificates in separate individual files. Typically the file names need to "
+"be the hash of the certificate followed by '.0'. If available, "
+"<command>cacertdir_rehash</command> can be used to create the correct names."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1350
+msgid "ldap_tls_cert (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1353
+msgid "Specifies the file that contains the certificate for the client's key."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1363
+msgid "ldap_tls_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1366
+msgid "Specifies the file that contains the client's key."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1375
+msgid "ldap_tls_cipher_suite (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1378
+msgid ""
+"Specifies acceptable cipher suites. Typically this is a colon sperated "
+"list. See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> for format."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1391
+msgid "ldap_id_use_start_tls (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1394
+msgid ""
+"Specifies that the id_provider connection must also use <systemitem class="
+"\"protocol\">tls</systemitem> to protect the channel."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1404
+msgid "ldap_id_mapping (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1407
+msgid ""
+"Specifies that SSSD should attempt to map user and group IDs from the "
+"ldap_user_objectsid and ldap_group_objectsid attributes instead of relying "
+"on ldap_user_uid_number and ldap_group_gid_number."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1413
+msgid "Currently this feature supports only ActiveDirectory objectSID mapping."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1423
+msgid "ldap_sasl_mech (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1426
+msgid ""
+"Specify the SASL mechanism to use. Currently only GSSAPI is tested and "
+"supported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1436
+msgid "ldap_sasl_authid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1439
+msgid ""
+"Specify the SASL authorization id to use. When GSSAPI is used, this "
+"represents the Kerberos principal used for authentication to the directory. "
+"This option can either contain the full principal (for example host/"
+"myhost@EXAMPLE.COM) or just the principal name (for example host/myhost)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1447
+msgid "Default: host/hostname@REALM"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1453
+msgid "ldap_sasl_realm (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1456
+msgid ""
+"Specify the SASL realm to use. When not specified, this option defaults to "
+"the value of krb5_realm. If the ldap_sasl_authid contains the realm as "
+"well, this option is ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1462
+msgid "Default: the value of krb5_realm."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1468
+msgid "ldap_sasl_canonicalize (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1471
+msgid ""
+"If set to true, the LDAP library would perform a reverse lookup to "
+"canonicalize the host name during a SASL bind."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1476
+msgid "Default: false;"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1482
+msgid "ldap_krb5_keytab (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1485
+msgid "Specify the keytab to use when using SASL/GSSAPI."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1488
+msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1494
+msgid "ldap_krb5_init_creds (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1497
+msgid ""
+"Specifies that the id_provider should init Kerberos credentials (TGT). This "
+"action is performed only if SASL is used and the mechanism selected is "
+"GSSAPI."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1509
+msgid "ldap_krb5_ticket_lifetime (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1512
+msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1516
+msgid "Default: 86400 (24 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1522 sssd-krb5.5.xml:74
+msgid "krb5_server, krb5_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1525
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled - for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1537 sssd-krb5.5.xml:89
+msgid ""
+"When using service discovery for KDC or kpasswd servers, SSSD first searches "
+"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
+"none are found."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1542 sssd-krb5.5.xml:94
+msgid ""
+"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
+"While the legacy name is recognized for the time being, users are advised to "
+"migrate their config files to use <quote>krb5_server</quote> instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1551 sssd-ipa.5.xml:260 sssd-krb5.5.xml:103
+msgid "krb5_realm (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1554
+msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1557
+msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1563 sssd-ipa.5.xml:275 sssd-krb5.5.xml:418
+msgid "krb5_canonicalize (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1566
+msgid ""
+"Specifies if the host principal should be canonicalized when connecting to "
+"LDAP server. This feature is available with MIT Kerberos >= 1.7"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1578
+msgid "ldap_pwd_policy (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1581
+msgid ""
+"Select the policy to evaluate the password expiration on the client side. "
+"The following values are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1586
+msgid ""
+"<emphasis>none</emphasis> - No evaluation on the client side. This option "
+"cannot disable server-side password policies."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1591
+msgid ""
+"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
+"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
+"evaluate if the password has expired."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1597
+msgid ""
+"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
+"to determine if the password has expired. Use chpass_provider=krb5 to update "
+"these attributes when the password is changed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1603
+msgid "Default: none"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1609
+msgid "ldap_referrals (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1612
+msgid "Specifies whether automatic referral chasing should be enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1616
+msgid ""
+"Please note that sssd only supports referral chasing when it is compiled "
+"with OpenLDAP version 2.4.13 or higher."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1621
+msgid ""
+"Chasing referrals may incur a performance penalty in environments that use "
+"them heavily, a notable example is Microsoft Active Directory. If your setup "
+"does not in fact require the use of referrals, setting this option to false "
+"might bring a noticeable performance improvement."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1635
+msgid "ldap_dns_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1638
+msgid "Specifies the service name to use when service discovery is enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1642
+msgid "Default: ldap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1648
+msgid "ldap_chpass_dns_service_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1651
+msgid ""
+"Specifies the service name to use to find an LDAP server which allows "
+"password changes when service discovery is enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1656
+msgid "Default: not set, i.e. service discovery is disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1662
+msgid "ldap_chpass_update_last_change (bool)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1665
+msgid ""
+"Specifies whether to update the ldap_user_shadow_last_change attribute with "
+"days since the Epoch after a password change operation."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1677
+msgid "ldap_access_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1680
+msgid ""
+"If using access_provider = ldap and ldap_access_order = filter (default), "
+"this option is mandatory. It specifies an LDAP search filter criteria that "
+"must be met for the user to be granted access on this host. If "
+"access_provider = ldap, ldap_access_order = filter and this option is not "
+"set, it will result in all users being denied access. Use access_provider = "
+"permit to change this default behavior."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
+msgid "Example:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:1695
+#, no-wrap
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1699
+msgid ""
+"This example means that access to this host is restricted to members of the "
+"\"allowedusers\" group in ldap."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1704
+msgid ""
+"Offline caching for this feature is limited to determining whether the "
+"user's last online login was granted access permission. If they were granted "
+"access during their last login, they will continue to be granted access "
+"while offline and vice-versa."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1712 sssd-ldap.5.xml:1762
+msgid "Default: Empty"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1718
+msgid "ldap_account_expire_policy (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1721
+msgid ""
+"With this option a client side evaluation of access control attributes can "
+"be enabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1725
+msgid ""
+"Please note that it is always recommended to use server side access control, "
+"i.e. the LDAP server should deny the bind request with a suitable error code "
+"even if the password is correct."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1732
+msgid "The following values are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1735
+msgid ""
+"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
+"determine if the account is expired."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1740
+msgid ""
+"<emphasis>ad</emphasis>: use the value of the 32bit field "
+"ldap_user_ad_user_account_control and allow access if the second bit is not "
+"set. If the attribute is missing access is granted. Also the expiration time "
+"of the account is checked."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1747
+msgid ""
+"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
+"emphasis>: use the value of ldap_ns_account_lock to check if access is "
+"allowed or not."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1753
+msgid ""
+"<emphasis>nds</emphasis>: the values of "
+"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
+"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
+"If both attributes are missing access is granted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1768
+msgid "ldap_access_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1771
+msgid "Comma separated list of access control options. Allowed values are:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1775
+msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1778
+msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1782
+msgid ""
+"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
+"to determine access"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1787
+msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1791
+msgid "Default: filter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1794
+msgid ""
+"Please note that it is a configuration error if a value is used more than "
+"once."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1801
+msgid "ldap_deref (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1804
+msgid ""
+"Specifies how alias dereferencing is done when performing a search. The "
+"following options are allowed:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1809
+msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1813
+msgid ""
+"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
+"the base object, but not in locating the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1818
+msgid ""
+"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
+"the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1823
+msgid ""
+"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
+"in locating the base object of the search."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1828
+msgid ""
+"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
+"client libraries)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1836
+msgid "ldap_rfc2307_fallback_to_local_users (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1839
+msgid ""
+"Allows to retain local users as members of an LDAP group for servers that "
+"use the RFC2307 schema."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1843
+msgid ""
+"In some environments where the RFC2307 schema is used, local users are made "
+"members of LDAP groups by adding their names to the memberUid attribute. "
+"The self-consistency of the domain is compromised when this is done, so SSSD "
+"would normally remove the \"missing\" users from the cached group "
+"memberships as soon as nsswitch tries to fetch information about the user "
+"via getpw*() or initgroups() calls."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1854
+msgid ""
+"This option falls back to checking if local users are referenced, and caches "
+"them so that later initgroups() calls will augment the local users with the "
+"additional LDAP groups."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:51
+msgid ""
+"All of the common configuration options that apply to SSSD domains also "
+"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
+"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for full details. <placeholder type="
+"\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:1870
+msgid "SUDO OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1874
+msgid "ldap_sudorule_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1877
+msgid "The object class of a sudo rule entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1880
+msgid "Default: sudoRole"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1886
+msgid "ldap_sudorule_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1889
+msgid "The LDAP attribute that corresponds to the sudo rule name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1899
+msgid "ldap_sudorule_command (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1902
+msgid "The LDAP attribute that corresponds to the command name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1906
+msgid "Default: sudoCommand"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1912
+msgid "ldap_sudorule_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1915
+msgid ""
+"The LDAP attribute that corresponds to the host name (or host IP address, "
+"host IP network, or host netgroup)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1920
+msgid "Default: sudoHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1926
+msgid "ldap_sudorule_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1929
+msgid ""
+"The LDAP attribute that corresponds to the user name (or UID, group name or "
+"user's netgroup)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1933
+msgid "Default: sudoUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1939
+msgid "ldap_sudorule_option (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1942
+msgid "The LDAP attribute that corresponds to the sudo options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1946
+msgid "Default: sudoOption"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1952
+msgid "ldap_sudorule_runasuser (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1955
+msgid ""
+"The LDAP attribute that corresponds to the user name that commands may be "
+"run as."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1959
+msgid "Default: sudoRunAsUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1965
+msgid "ldap_sudorule_runasgroup (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1968
+msgid ""
+"The LDAP attribute that corresponds to the group name or group GID that "
+"commands may be run as."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1972
+msgid "Default: sudoRunAsGroup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1978
+msgid "ldap_sudorule_notbefore (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1981
+msgid ""
+"The LDAP attribute that corresponds to the start date/time for when the sudo "
+"rule is valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1985
+msgid "Default: sudoNotBefore"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:1991
+msgid "ldap_sudorule_notafter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1994
+msgid ""
+"The LDAP attribute that corresponds to the expiration date/time, after which "
+"the sudo rule will no longer be valid."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:1999
+msgid "Default: sudoNotAfter"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2005
+msgid "ldap_sudorule_order (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2008
+msgid "The LDAP attribute that corresponds to the ordering index of the rule."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2012
+msgid "Default: sudoOrder"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2018
+msgid "ldap_sudo_full_refresh_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2021
+msgid ""
+"How many seconds SSSD will wait between executing a full refresh of sudo "
+"rules (which downloads all rules that are stored on the server)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2026
+msgid ""
+"The value must be greater than <emphasis>ldap_sudo_smart_refresh_interval </"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2031
+msgid "Default: 21600 (6 hours)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2037
+msgid "ldap_sudo_smart_refresh_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2040
+msgid ""
+"How many seconds SSSD has to wait before executing a smart refresh of sudo "
+"rules (which downloads all rules that have USN higher than the highest USN "
+"of cached rules)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2046
+msgid ""
+"If USN attributes are not supported by the server, the modifyTimestamp "
+"attribute is used instead."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2056
+msgid "ldap_sudo_use_host_filter (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2059
+msgid ""
+"If true, SSSD will download only rules that are applicable to this machine "
+"(using the IPv4 or IPv6 host/network addresses and hostnames)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2070
+msgid "ldap_sudo_hostnames (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2073
+msgid ""
+"Space separated list of hostnames or fully qualified domain names that "
+"should be used to filter the rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2078
+msgid ""
+"If this option is empty, SSSD will try to discover the hostname and the "
+"fully qualified domain name automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2083 sssd-ldap.5.xml:2106 sssd-ldap.5.xml:2124
+#: sssd-ldap.5.xml:2142
+msgid ""
+"If <emphasis>ldap_sudo_use_host_filter</emphasis> is <emphasis>false</"
+"emphasis> then this option has no effect."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2088 sssd-ldap.5.xml:2111
+msgid "Default: not specified"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2094
+msgid "ldap_sudo_ip (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2097
+msgid ""
+"Space separated list of IPv4 or IPv6 host/network addresses that should be "
+"used to filter the rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2102
+msgid ""
+"If this option is empty, SSSD will try to discover the addresses "
+"automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2117
+msgid "ldap_sudo_include_netgroups (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2120
+msgid ""
+"If true then SSSD will download every rule that contains a netgroup in "
+"sudoHost attribute."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2135
+msgid "ldap_sudo_include_regexp (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2138
+msgid ""
+"If true then SSSD will download every rule that contains a wildcard in "
+"sudoHost attribute."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:1872
+msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2154
+msgid ""
+"This manual page only describes attribute name mapping. For detailed "
+"explanation of sudo related attribute semantics, see <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2164
+msgid "AUTOFS OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2166
+msgid ""
+"Please note that the default values correspond to the default schema which "
+"is RFC2307."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2172
+msgid "ldap_autofs_map_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2175 sssd-ldap.5.xml:2201
+msgid "The object class of an automount map entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2178 sssd-ldap.5.xml:2205
+msgid "Default: automountMap"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2185
+msgid "ldap_autofs_map_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2188
+msgid "The name of an automount map entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2191
+msgid "Default: ou"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2198
+msgid "ldap_autofs_entry_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2212
+msgid "ldap_autofs_entry_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2215 sssd-ldap.5.xml:2229
+msgid ""
+"The key of an automount entry in LDAP. The entry usually corresponds to a "
+"mount point."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2226
+msgid "ldap_autofs_entry_value (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2233
+msgid "Default: automountInformation"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2170
+msgid ""
+"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+"\"variablelist\" id=\"4\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2243
+msgid "ADVANCED OPTIONS"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2250
+msgid "ldap_netgroup_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2255
+msgid "ldap_user_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2260
+msgid "ldap_group_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2265
+msgid "ldap_user_search_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2268
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict user searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2272
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_user_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
+#: sssd-ldap.5.xml:2282
+#, no-wrap
+msgid ""
+" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2285
+msgid ""
+"This filter would restrict user searches to users that have their shell set "
+"to /bin/tcsh."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2292
+msgid "ldap_group_search_filter (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2295
+msgid ""
+"This option specifies an additional LDAP search filter criteria that "
+"restrict group searches."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ldap.5.xml:2299
+msgid ""
+"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
+"by ldap_group_search_base."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2309
+msgid "ldap_sudo_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ldap.5.xml:2314
+msgid "ldap_autofs_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2245
+msgid ""
+"These options are supported by LDAP domains, but they should be used with "
+"caution. Please include them in your configuration only if you know what you "
+"are doing. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2331
+msgid ""
+"The following example assumes that SSSD is correctly configured and LDAP is "
+"set to one of the domains in the <replaceable>[domains]</replaceable> "
+"section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ldap.5.xml:2337
+#, no-wrap
+msgid ""
+" [domain/LDAP]\n"
+" id_provider = ldap\n"
+" auth_provider = ldap\n"
+" ldap_uri = ldap://ldap.mydomain.org\n"
+" ldap_search_base = dc=mydomain,dc=org\n"
+" ldap_tls_reqcert = demand\n"
+" cache_credentials = true\n"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: sssd-ldap.5.xml:2336 sssd-simple.5.xml:139 sssd-ipa.5.xml:620
+#: sssd-ad.5.xml:237 sssd-sudo.5.xml:56 sssd-sudo.5.xml:78 sssd-krb5.5.xml:450
+#: include/ldap_id_mapping.xml:63
+msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ldap.5.xml:2349 sssd_krb5_locator_plugin.8.xml:61 sssd-ad.5.xml:252
+#: sssd.8.xml:191 sss_seed.8.xml:163
+msgid "NOTES"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ldap.5.xml:2351
+msgid ""
+"The descriptions of some of the configuration options in this manual page "
+"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
+"distribution."
+msgstr ""
+
+#. type: Content of: <refentryinfo>
+#: pam_sss.8.xml:8 include/upstream.xml:2
+msgid ""
+"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
+"fedorahosted.org/sssd</orgname>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: pam_sss.8.xml:13 pam_sss.8.xml:18
+msgid "pam_sss"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: pam_sss.8.xml:19
+msgid "PAM module for SSSD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: pam_sss.8.xml:24
+msgid ""
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:45
+msgid ""
+"<command>pam_sss.so</command> is the PAM interface to the System Security "
+"Services daemon (SSSD). Errors and results are logged through "
+"<command>syslog(3)</command> with the LOG_AUTHPRIV facility."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:55
+msgid "<option>quiet</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:58
+msgid "Suppress log messages for unknown users."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:63
+msgid "<option>forward_pass</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:66
+msgid ""
+"If <option>forward_pass</option> is set the entered password is put on the "
+"stack for other PAM modules to use."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:73
+msgid "<option>use_first_pass</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:76
+msgid ""
+"The argument use_first_pass forces the module to use a previous stacked "
+"modules password and will never prompt the user - if no password is "
+"available or the password is not appropriate, the user will be denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:84
+msgid "<option>use_authtok</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:87
+msgid ""
+"When password changing enforce the module to set the new password to the one "
+"provided by a previously stacked password module."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: pam_sss.8.xml:94
+msgid "<option>retry=N</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:97
+msgid ""
+"If specified the user is asked another N times for a password if "
+"authentication fails. Default is 0."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: pam_sss.8.xml:99
+msgid ""
+"Please note that this option might not work as expected if the application "
+"calling PAM handles the user dialog on its own. A typical example is "
+"<command>sshd</command> with <option>PasswordAuthentication</option>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:110
+msgid "MODULE TYPES PROVIDED"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:111
+msgid ""
+"All module types (<option>account</option>, <option>auth</option>, "
+"<option>password</option> and <option>session</option>) are provided."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: pam_sss.8.xml:117
+msgid "FILES"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:118
+msgid ""
+"If a password reset by root fails, because the corresponding SSSD provider "
+"does not support password resets, an individual message can be displayed. "
+"This message can e.g. contain instructions about how to reset a password."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:123
+msgid ""
+"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
+"filename> where LOC stands for a locale string returned by <citerefentry> "
+"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
+"citerefentry>. If there is no matching file the content of "
+"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
+"the owner of the files and only root may have read and write permissions "
+"while all other users must have only read permissions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: pam_sss.8.xml:133
+msgid ""
+"These files are searched in the directory <filename>/etc/sssd/customize/"
+"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
+"displayed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
+msgid "sssd_krb5_locator_plugin"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:22
+msgid ""
+"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
+"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
+"libraries what Realm and which KDC to use. Typically this is done in "
+"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
+"To simplify the configuration the Realm and the KDC can be defined in "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> as described in <citerefentry> "
+"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:48
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry> puts the Realm and the name or IP address of the KDC into "
+"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively. "
+"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
+"libraries it reads and evaluates these variables and returns them to the "
+"libraries."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:63
+msgid ""
+"Not all Kerberos implementations support the use of plugins. If "
+"<command>sssd_krb5_locator_plugin</command> is not available on your system "
+"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd_krb5_locator_plugin.8.xml:69
+msgid ""
+"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
+"debug messages will be sent to stderr."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
+msgid "sssd-simple"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-simple.5.xml:17
+msgid "the configuration file for SSSD's 'simple' access-control provider"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:24
+msgid ""
+"This manual page describes the configuration of the simple access-control "
+"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry>. For a detailed syntax reference, "
+"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:38
+msgid ""
+"The simple access provider grants or denies access based on an access or "
+"deny list of user or group names. The following rules apply:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:43
+msgid "If all lists are empty, access is granted"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:47
+msgid ""
+"If any list is provided, the order of evaluation is allow,deny. This means "
+"that any matching deny rule will supersede any matched allow rule."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:54
+msgid ""
+"If either or both \"allow\" lists are provided, all users are denied unless "
+"they appear in the list."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
+#: sssd-simple.5.xml:60
+msgid ""
+"If only \"deny\" lists are provided, all users are granted access unless "
+"they appear in the list."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:78
+msgid "simple_allow_users (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:81
+msgid "Comma separated list of users who are allowed to log in."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:88
+msgid "simple_deny_users (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:91
+msgid "Comma separated list of users who are explicitly denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:97
+msgid "simple_allow_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:100
+msgid ""
+"Comma separated list of groups that are allowed to log in. This applies only "
+"to groups within this SSSD domain. Local groups are not evaluated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-simple.5.xml:108
+msgid "simple_deny_groups (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-simple.5.xml:111
+msgid ""
+"Comma separated list of groups that are explicitly denied access. This "
+"applies only to groups within this SSSD domain. Local groups are not "
+"evaluated."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:70 sssd-ipa.5.xml:71 sssd-ad.5.xml:76
+msgid ""
+"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
+"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> manual page for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:120
+msgid ""
+"Specifying no values for any of the lists is equivalent to skipping it "
+"entirely. Beware of this while generating parameters for the simple provider "
+"using automated scripts."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:125
+msgid ""
+"Please note that it is an configuration error if both, simple_allow_users "
+"and simple_deny_users, are defined."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-simple.5.xml:133
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the simple access provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-simple.5.xml:140
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" access_provider = simple\n"
+" simple_allow_users = user1, user2\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
+msgid "sssd-ipa"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:23
+msgid ""
+"This manual page describes the configuration of the IPA provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:36
+msgid ""
+"The IPA provider is a back end used to connect to an IPA server. (Refer to "
+"the freeipa.org web site for information about IPA servers.) This provider "
+"requires that the machine be joined to the IPA domain; configuration is "
+"almost entirely self-discovered and obtained directly from the server."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:43
+msgid ""
+"The IPA provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:55
+msgid ""
+"However, it is neither necessary nor recommended to set these options. IPA "
+"provider can also be used as an access and chpass provider. As an access "
+"provider it uses HBAC (host-based access control) rules. Please refer to "
+"freeipa.org for more information about HBAC. No configuration of access "
+"provider is required on the client side."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:62
+msgid ""
+"The IPA provider will use the PAC responder if the Kerberos tickets of users "
+"from trusted realms contain a PAC. To make configuration easier the PAC "
+"responder is started automatically if the IPA ID provider is configured."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:78
+msgid "ipa_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:81
+msgid ""
+"Specifies the name of the IPA domain. This is optional. If not provided, "
+"the configuration domain name is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:89
+msgid "ipa_server, ipa_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:92
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the IPA servers to "
+"which SSSD should connect in the order of preference. For more information "
+"on failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:105
+msgid "ipa_hostname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:108
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the IPA domain to identify this host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:116
+msgid "ipa_dyndns_update (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:119
+msgid ""
+"Optional. This option tells SSSD to automatically update the DNS server "
+"built into FreeIPA v2 with the IP address of this client."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:124
+msgid ""
+"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
+"the default Kerberos realm must be set properly in /etc/krb5.conf"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:135
+msgid "ipa_dyndns_iface (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:138
+msgid ""
+"Optional. Applicable only when ipa_dyndns_update is true. Choose the "
+"interface whose IP address should be used for dynamic DNS updates."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:143
+msgid "Default: Use the IP address of the IPA LDAP connection"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:149
+msgid "ipa_hbac_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:152
+msgid "Optional. Use the given string as search base for HBAC related objects."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:156
+msgid "Default: Use base DN"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:162
+msgid "ipa_host_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:165
+msgid "Optional. Use the given string as search base for host objects."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:169 sssd-ipa.5.xml:193 sssd-ipa.5.xml:212 sssd-ipa.5.xml:231
+msgid ""
+"See <quote>ldap_search_base</quote> for information about configuring "
+"multiple search bases."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:174
+msgid ""
+"If filter is given in any of search bases and "
+"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
+"will be ignored."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
+#: include/ldap_search_bases_experimental.xml:23
+msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:186
+msgid "ipa_selinux_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:189
+msgid "Optional. Use the given string as search base for SELinux user maps."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:205
+msgid "ipa_subdomains_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:208
+msgid "Optional. Use the given string as search base for trusted domains."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:217
+msgid "Default: the value of <emphasis>cn=trusts,%basedn</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:224
+msgid "ipa_master_domain_search_base (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:227
+msgid "Optional. Use the given string as search base for master domain object."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:236
+msgid "Default: the value of <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:243 sssd-krb5.5.xml:232
+msgid "krb5_validate (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:246
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:253
+msgid ""
+"Note that this default differs from the traditional Kerberos provider back "
+"end."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:263
+msgid ""
+"The name of the Kerberos realm. This is optional and defaults to the value "
+"of <quote>ipa_domain</quote>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:267
+msgid ""
+"The name of the Kerberos realm has a special meaning in IPA - it is "
+"converted into the base DN to use for performing LDAP operations."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:278
+msgid ""
+"Specifies if the host and user principal should be canonicalized when "
+"connecting to IPA LDAP and also for AS requests. This feature is available "
+"with MIT Kerberos >= 1.7"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:291
+msgid "ipa_hbac_refresh (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:294
+msgid ""
+"The amount of time between lookups of the HBAC rules against the IPA server. "
+"This will reduce the latency and load on the IPA server if there are many "
+"access-control requests made in a short period."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:301
+msgid "Default: 5 (seconds)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:306
+msgid "ipa_hbac_treat_deny_as (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:309
+msgid ""
+"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
+"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
+"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
+"client will support two modes of operation during this transition period:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:318
+msgid ""
+"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
+"users will be denied access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:323
+msgid ""
+"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
+"careful with this option, as it may result in opening unintended access."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:328
+msgid "Default: DENY_ALL"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:333
+msgid "ipa_hbac_support_srchost (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:336
+msgid ""
+"If this is set to false, then srchost as given to SSSD by PAM will be "
+"ignored."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:340
+msgid ""
+"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
+"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:351
+msgid "ipa_automount_location (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:354
+msgid "The automounter location this IPA client will be using"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:357
+msgid "Default: The location named \"default\""
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:364
+msgid "ipa_netgroup_member_of (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:367
+msgid "The LDAP attribute that lists netgroup's memberships."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:376
+msgid "ipa_netgroup_member_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:379
+msgid ""
+"The LDAP attribute that lists system users and groups that are direct "
+"members of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+msgid "Default: memberUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:389
+msgid "ipa_netgroup_member_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:392
+msgid ""
+"The LDAP attribute that lists hosts and host groups that are direct members "
+"of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+msgid "Default: memberHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:401
+msgid "ipa_netgroup_member_ext_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:404
+msgid ""
+"The LDAP attribute that lists FQDNs of hosts and host groups that are "
+"members of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:408
+msgid "Default: externalHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:413
+msgid "ipa_netgroup_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:416
+msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:420
+msgid "Default: nisDomainName"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:426
+msgid "ipa_host_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+msgid "The object class of a host entry in LDAP."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+msgid "Default: ipaHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:437
+msgid "ipa_host_fqdn (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:440
+msgid "The LDAP attribute that contains FQDN of the host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:443
+msgid "Default: fqdn"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:449
+msgid "ipa_selinux_usermap_object_class (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:460
+msgid "ipa_selinux_usermap_name (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:463
+msgid "The LDAP attribute that contains the name of SELinux usermap."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:472
+msgid "ipa_selinux_usermap_member_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:475
+msgid ""
+"The LDAP attribute that contains all users / groups this rule match against."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:484
+msgid "ipa_selinux_usermap_member_host (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:487
+msgid ""
+"The LDAP attribute that contains all hosts / hostgroups this rule match "
+"against."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:496
+msgid "ipa_selinux_usermap_see_also (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:499
+msgid ""
+"The LDAP attribute that contains DN of HBAC rule which can be used for "
+"matching instead of memberUser and memberHost"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:504
+msgid "Default: seeAlso"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:509
+msgid "ipa_selinux_usermap_selinux_user (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:512
+msgid "The LDAP attribute that contains SELinux user string itself."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:516
+msgid "Default: ipaSELinuxUser"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:521
+msgid "ipa_selinux_usermap_enabled (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:524
+msgid ""
+"The LDAP attribute that contains whether or not is user map enabled for "
+"usage."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:528
+msgid "Default: ipaEnabledFlag"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:533
+msgid "ipa_selinux_usermap_user_category (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:536
+msgid "The LDAP attribute that contains user category such as 'all'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:540
+msgid "Default: userCategory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:545
+msgid "ipa_selinux_usermap_host_category (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:548
+msgid "The LDAP attribute that contains host category such as 'all'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:552
+msgid "Default: hostCategory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:557
+msgid "ipa_selinux_usermap_uuid (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:560
+msgid "The LDAP attribute that contains unique ID of the user map."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:564
+msgid "Default: ipaUniqueID"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ipa.5.xml:569
+msgid "ipa_host_ssh_public_key (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:572
+msgid "The LDAP attribute that contains the host's SSH public keys."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ipa.5.xml:576
+msgid "Default: ipaSshPubKey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-ipa.5.xml:585
+msgid "SUBDOMAINS PROVIDER"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:587
+msgid ""
+"The IPA subdomains provider behaves slightly differently if it is configured "
+"explicitly or implicitly."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:591
+msgid ""
+"If the option 'subdomains_provider = ipa' is found in the domain section of "
+"sssd.conf, the IPA subdomains provider is configured explicitly, and all "
+"subdomain requests are sent to the IPA server if necessary."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:597
+msgid ""
+"If the option 'subdomains_provider' is not set in the domain section of sssd."
+"conf but there is the option 'id_provider = ipa', the IPA subdomains "
+"provider is configured implictly. In this case, if a subdomain request fails "
+"and indicates that the server does not support subdomains, i.e. is not "
+"configured for trusts, the IPA subdomains provider is disabled. After an "
+"hour or after the IPA provider goes online, the subdomains provider is "
+"enabled again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ipa.5.xml:614
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This examples shows only the ipa provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ipa.5.xml:621
+#, no-wrap
+msgid ""
+" [domain/example.com]\n"
+" id_provider = ipa\n"
+" ipa_server = ipaserver.example.com\n"
+" ipa_hostname = myhost.example.com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-ad.5.xml:10 sssd-ad.5.xml:16
+msgid "sssd-ad"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:23
+msgid ""
+"This manual page describes the configuration of the AD provider for "
+"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
+"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
+"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:36
+msgid ""
+"The AD provider is a back end used to connect to an Active Directory server. "
+"This provider requires that the machine be joined to the AD domain and a "
+"keytab is available."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:41
+msgid ""
+"The AD provider supports connecting to Active Directory 2008 R2 or later. "
+"Earlier versions may work, but are unsupported."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:45
+msgid ""
+"The AD provider accepts the same options used by the <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
+"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
+"provider with some exceptions described below."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:57
+msgid ""
+"However, it is neither necessary nor recommended to set these options. The "
+"AD provider can also be used as an access and chpass provider. No "
+"configuration of the access provider is required on the client side."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:69
+#, no-wrap
+msgid ""
+"ldap_id_mapping = False\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:63
+msgid ""
+"By default, the AD provider will map UID and GID values from the objectSID "
+"parameter in Active Directory. For details on this, see the <quote>ID "
+"MAPPING</quote> section below. If you want to disable ID mapping and instead "
+"rely on POSIX attributes defined in Active Directory, you should set "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:83
+msgid "ad_domain (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:86
+msgid ""
+"Specifies the name of the Active Directory domain. This is optional. If not "
+"provided, the configuration domain name is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:91
+msgid ""
+"For proper operation, this option should be specified as the lower-case "
+"version of the long version of the Active Directory domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:99
+msgid "ad_server, ad_backup_server (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:102
+msgid ""
+"The comma-separated list of IP addresses or hostnames of the AD servers to "
+"which SSSD should connect in order of preference. For more information on "
+"failover and server redundancy, see the <quote>FAILOVER</quote> section. "
+"This is optional if autodiscovery is enabled. For more information on "
+"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-ad.5.xml:115
+msgid "ad_hostname (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:118
+msgid ""
+"Optional. May be set on machines where the hostname(5) does not reflect the "
+"fully qualified name used in the Active Directory domain to identify this "
+"host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-ad.5.xml:124
+msgid ""
+"This field is used to determine the host principal in use in the keytab. It "
+"must match the hostname for which the keytab was issued."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
+#: sssd-ad.5.xml:193
+#, no-wrap
+msgid ""
+"fallback_homedir = /home/%u\n"
+" "
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:231
+msgid ""
+"The following example assumes that SSSD is correctly configured and example."
+"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
+"This example shows only the AD provider-specific options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:238
+#, no-wrap
+msgid ""
+"[domain/EXAMPLE]\n"
+"id_provider = ad\n"
+"auth_provider = ad\n"
+"access_provider = ad\n"
+"chpass_provider = ad\n"
+"\n"
+"ad_server = dc1.example.com\n"
+"ad_hostname = client.example.com\n"
+"ad_domain = example.com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-ad.5.xml:258
+#, no-wrap
+msgid ""
+"access_provider = ldap\n"
+"ldap_access_order = expire\n"
+"ldap_account_expire_policy = ad\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-ad.5.xml:254
+msgid ""
+"The AD access control provider checks if the account is expired. It has the "
+"same effect as the following configuration of the LDAP provider: "
+"<placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-sudo.5.xml:10 sssd-sudo.5.xml:16
+msgid "sssd-sudo"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd-sudo.5.xml:17
+msgid "Configuring sudo with the SSSD back end"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:23
+msgid ""
+"This manual page describes how to configure <citerefentry> "
+"<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </citerefentry> "
+"to work with <citerefentry> <refentrytitle>sssd</refentrytitle> "
+"<manvolnum>8</manvolnum> </citerefentry> and how SSSD caches sudo rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:36
+msgid "Configuring sudo to cooperate with SSSD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:38
+msgid ""
+"To enable SSSD as a source for sudo rules, add <emphasis>sss</emphasis> to "
+"the <emphasis>sudoers</emphasis> entry in <citerefentry> "
+"<refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:47
+msgid ""
+"For example, to configure sudo to first lookup rules in the standard "
+"<citerefentry> <refentrytitle>sudoers</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> file (which should contain rules that apply to "
+"local users) and then in SSSD, the nsswitch.conf file should contain the "
+"following line:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:57
+#, no-wrap
+msgid "sudoers: files sss\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:61
+msgid ""
+"More information about configuring the sudoers search order from the "
+"nsswitch.conf file as well as information about the LDAP schema that is used "
+"to store sudo rules in the directory can be found in <citerefentry> "
+"<refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:72
+msgid "Configuring SSSD to fetch sudo rules"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:74
+msgid ""
+"The following example shows how to configure SSSD to download sudo rules "
+"from an LDAP server."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-sudo.5.xml:79
+#, no-wrap
+msgid ""
+"[sssd]\n"
+"config_file_version = 2\n"
+"services = nss, pam, sudo\n"
+"domains = EXAMPLE\n"
+"\n"
+"[domain/EXAMPLE]\n"
+"id_provider = ldap\n"
+"sudo_provider = ldap\n"
+"ldap_uri = ldap://example.com\n"
+"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:92
+msgid ""
+"When the SSSD is configured to use the IPA provider, the sudo provider is "
+"automatically enabled. The sudo search base is configured to use the compat "
+"tree (ou=sudoers,$DC)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd-sudo.5.xml:99
+msgid "The SUDO rule caching mechanism"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:101
+msgid ""
+"The biggest challenge, when developing sudo support in SSSD, was to ensure "
+"that running sudo with SSSD as the data source provides the same user "
+"experience and is as fast as sudo but keeps providing the most current set "
+"of rules as possible. To satisfy these requirements, SSSD uses three kinds "
+"of updates. They are referred to as full refresh, smart refresh and rules "
+"refresh."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:109
+msgid ""
+"The <emphasis>smart refresh</emphasis> periodically downloads rules that are "
+"new or were modified after the last update. Its primary goal is to keep the "
+"database growing by fetching only small increments that do not generate "
+"large amounts of network traffic."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:115
+msgid ""
+"The <emphasis>full refresh</emphasis> simply deletes all sudo rules stored "
+"in the cache and replaces them with all rules that are stored on the server. "
+"This is used to keep the cache consistent by removing every rule which was "
+"deleted from the server. However, full refresh may produce a lot of traffic "
+"and thus it should be run only occasionally depending on the size and "
+"stability of the sudo rules."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:123
+msgid ""
+"The <emphasis>rules refresh</emphasis> ensures that we do not grant the user "
+"more permission than defined. It is triggered each time the user runs sudo. "
+"Rules refresh will find all rules that apply to this user, check their "
+"expiration time and redownload them if expired. In the case that any of "
+"these rules are missing on the server, the SSSD will do an out of band full "
+"refresh because more rules (that apply to other users) may have been deleted."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:132
+msgid ""
+"If enabled, SSSD will store only rules that can be applied to this machine. "
+"This means rules that contain one of the following values in "
+"<emphasis>sudoHost</emphasis> attribute:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:139
+msgid "keyword ALL"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:144
+msgid "wildcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:149
+msgid "netgroup (in the form \"+netgroup\")"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:154
+msgid "hostname or fully qualified domain name of this machine"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:159
+msgid "one of the IP addresses of this machine"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
+#: sssd-sudo.5.xml:164
+msgid "one of the IP addresses of the network (in the form \"address/mask\")"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-sudo.5.xml:170
+msgid ""
+"There are many configuration options that can be used to adjust the "
+"behavior. Please refer to \"ldap_sudo_*\" in <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> and \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd.8.xml:10 sssd.8.xml:15
+msgid "sssd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sssd.8.xml:16
+msgid "System Security Services Daemon"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sssd.8.xml:21
+msgid ""
+"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:31
+msgid ""
+"<command>SSSD</command> provides a set of daemons to manage access to remote "
+"directories and authentication mechanisms. It provides an NSS and PAM "
+"interface toward the system and a pluggable backend system to connect to "
+"multiple different account sources as well as D-Bus interface. It is also "
+"the basis to provide client auditing and policy services for projects like "
+"FreeIPA. It provides a more robust database to store local users as well as "
+"extended user data."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:46
+msgid ""
+"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:53
+msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:57
+msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:60
+msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:69
+msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:73
+msgid ""
+"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:76
+msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:85
+msgid "<option>-f</option>,<option>--debug-to-files</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:89
+msgid ""
+"Send the debug output to files instead of stderr. By default, the log files "
+"are stored in <filename>/var/log/sssd</filename> and there are separate log "
+"files for every SSSD service and domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:97
+msgid "<option>-D</option>,<option>--daemon</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:101
+msgid "Become a daemon after starting up."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:107 sss_seed.8.xml:136
+msgid "<option>-i</option>,<option>--interactive</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:111
+msgid "Run in the foreground, don't become a daemon."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:117 sss_debuglevel.8.xml:42
+msgid "<option>-c</option>,<option>--config</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:121 sss_debuglevel.8.xml:46
+msgid ""
+"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
+"conf</filename>. For reference on the config file syntax and options, "
+"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+"<manvolnum>5</manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:135
+msgid "<option>--version</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:139
+msgid "Print version number and exit."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><title>
+#: sssd.8.xml:147
+msgid "Signals"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:150
+msgid "SIGTERM/SIGINT"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:153
+msgid ""
+"Informs the SSSD to gracefully terminate all of its child processes and then "
+"shut down the monitor."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:159
+msgid "SIGHUP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:162
+msgid ""
+"Tells the SSSD to stop writing to its current debug file descriptors and to "
+"close and reopen them. This is meant to facilitate log rolling with programs "
+"like logrotate."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:170
+msgid "SIGUSR1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:173
+msgid ""
+"Tells the SSSD to simulate offline operation for one minute. This is mostly "
+"useful for testing purposes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sssd.8.xml:179
+msgid "SIGUSR2"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sssd.8.xml:182
+msgid ""
+"Tells the SSSD to go online immediately. This is mostly useful for testing "
+"purposes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd.8.xml:193
+msgid ""
+"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
+"applications will not use the fast in memory cache."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
+msgid "sss_obfuscate"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_obfuscate.8.xml:16
+msgid "obfuscate a clear text password"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_obfuscate.8.xml:21
+msgid ""
+"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
+"replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:32
+msgid ""
+"<command>sss_obfuscate</command> converts a given password into human-"
+"unreadable format and places it into appropriate domain section of the SSSD "
+"config file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:37
+msgid ""
+"The cleartext password is read from standard input or entered "
+"interactively. The obfuscated password is put into "
+"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
+"<quote>ldap_default_authtok_type</quote> parameter is set to "
+"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry> for more details on these parameters."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_obfuscate.8.xml:49
+msgid ""
+"Please note that obfuscating the password provides <emphasis>no real "
+"security benefit</emphasis> as it is still possible for an attacker to "
+"reverse-engineer the password back. Using better authentication mechanisms "
+"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
+"advised."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:63
+msgid "<option>-s</option>,<option>--stdin</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:67
+msgid "The password to obfuscate will be read from standard input."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:79
+#: sss_ssh_knownhostsproxy.1.xml:78
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:79
+msgid ""
+"The SSSD domain to use the password in. The default name is <quote>default</"
+"quote>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_obfuscate.8.xml:86
+msgid ""
+"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:91
+msgid "Read the config file specified by the positional parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_obfuscate.8.xml:95
+msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
+msgid "sss_useradd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_useradd.8.xml:16
+msgid "create a new user"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_useradd.8.xml:21
+msgid ""
+"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_useradd.8.xml:32
+msgid ""
+"<command>sss_useradd</command> creates a new user account using the values "
+"specified on the command line plus the default values from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:43 sss_seed.8.xml:76
+msgid ""
+"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:48
+msgid ""
+"Set the UID of the user to the value of <replaceable>UID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:55 sss_usermod.8.xml:43 sss_seed.8.xml:100
+msgid ""
+"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:60 sss_usermod.8.xml:48 sss_seed.8.xml:105
+msgid ""
+"Any text string describing the user. Often used as the field for the user's "
+"full name."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:67 sss_usermod.8.xml:55 sss_seed.8.xml:112
+msgid ""
+"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:72
+msgid ""
+"The home directory of the user account. The default is to append the "
+"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
+"that as the home directory. The base that is prepended before "
+"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
+"baseDirectory</quote> setting in sssd.conf."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:82 sss_usermod.8.xml:66 sss_seed.8.xml:124
+msgid ""
+"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:87
+msgid ""
+"The user's login shell. The default is currently <filename>/bin/bash</"
+"filename>. The default can be changed with <quote>user_defaults/"
+"defaultShell</quote> setting in sssd.conf."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:96
+msgid ""
+"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:101
+msgid "A list of existing groups this user is also a member of."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:107
+msgid "<option>-m</option>,<option>--create-home</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:111
+msgid ""
+"Create the user's home directory if it does not exist. The files and "
+"directories contained in the skeleton directory (which can be defined with "
+"the -k option or in the config file) will be copied to the home directory."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:121
+msgid "<option>-M</option>,<option>--no-create-home</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:125
+msgid ""
+"Do not create the user's home directory. Overrides configuration settings."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:132
+msgid ""
+"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:137
+msgid ""
+"The skeleton directory, which contains files and directories to be copied in "
+"the user's home directory, when the home directory is created by "
+"<command>sss_useradd</command>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:143
+msgid ""
+"This option is only valid if the <option>-m</option> (or <option>--create-"
+"home</option>) option is specified, or creation of home directories is set "
+"to TRUE in the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_useradd.8.xml:152 sss_usermod.8.xml:124
+msgid ""
+"<option>-Z</option>,<option>--selinux-user</option> "
+"<replaceable>SELINUX_USER</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_useradd.8.xml:157
+msgid ""
+"The SELinux user for the user's login. If not specified, the system default "
+"will be used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
+msgid "sssd-krb5"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:23
+msgid ""
+"This manual page describes the configuration of the Kerberos 5 "
+"authentication backend for <citerefentry> <refentrytitle>sssd</"
+"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>. For a detailed "
+"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
+"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:36
+msgid ""
+"The Kerberos 5 authentication backend contains auth and chpass providers. It "
+"must be paired with an identity provider in order to function properly (for "
+"example, id_provider = ldap). Some information required by the Kerberos 5 "
+"authentication backend must be provided by the identity provider, such as "
+"the user's Kerberos Principal Name (UPN). The configuration of the identity "
+"provider should have an entry to specify the UPN. Please refer to the man "
+"page for the applicable identity provider for details on how to configure "
+"this."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:47
+msgid ""
+"This backend also provides access control based on the .k5login file in the "
+"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
+"Please note that an empty .k5login file will deny all access to this user. "
+"To activate this feature, use 'access_provider = krb5' in your SSSD "
+"configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:55
+msgid ""
+"In the case where the UPN is not available in the identity backend, "
+"<command>sssd</command> will construct a UPN using the format "
+"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:77
+msgid ""
+"Specifies the comma-separated list of IP addresses or hostnames of the "
+"Kerberos servers to which SSSD should connect, in the order of preference. "
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
+"colon) may be appended to the addresses or hostnames. If empty, service "
+"discovery is enabled; for more information, refer to the <quote>SERVICE "
+"DISCOVERY</quote> section."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:106
+msgid ""
+"The name of the Kerberos realm. This option is required and must be "
+"specified."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:113
+msgid "krb5_kpasswd, krb5_backup_kpasswd (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:116
+msgid ""
+"If the change password service is not running on the KDC, alternative "
+"servers can be defined here. An optional port number (preceded by a colon) "
+"may be appended to the addresses or hostnames."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:122
+msgid ""
+"For more information on failover and server redundancy, see the "
+"<quote>FAILOVER</quote> section. NOTE: Even if there are no more kpasswd "
+"servers to try, the backend is not switched to operate offline if "
+"authentication against the KDC is still possible."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:129
+msgid "Default: Use the KDC"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:135
+msgid "krb5_ccachedir (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:138
+msgid ""
+"Directory to store credential caches. All the substitution sequences of "
+"krb5_ccname_template can be used here, too, except %d and %P. If the "
+"directory does not exist, it will be created. If %u, %U, %p or %h are used, "
+"a private directory belonging to the user is created. Otherwise, a public "
+"directory with restricted deletion flag (aka sticky bit, as described in "
+"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
+"</citerefentry> for details) is created."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:152
+msgid "Default: /tmp"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:158
+msgid "krb5_ccname_template (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:174
+msgid "login UID"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:177
+msgid "%p"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:178
+msgid "principal name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:182
+msgid "%r"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:183
+msgid "realm name"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:186
+msgid "%h"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:187
+msgid "home directory"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:192
+msgid "value of krb5ccache_dir"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:197
+msgid "%P"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:198
+msgid "the process ID of the SSSD client"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:161
+msgid ""
+"Location of the user's credential cache. Two credential cache types are "
+"currently supported: <quote>FILE</quote> and <quote>DIR</quote>. The cache "
+"can be specified either as <replaceable>TYPE:RESIDUAL</replaceable>, or as "
+"an absolute path, which implies the <quote>FILE</quote> type. In the "
+"template, the following sequences are substituted: <placeholder type="
+"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
+"used to create a unique filename in a safe way."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:212
+msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:218
+msgid "krb5_auth_timeout (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:221
+msgid ""
+"Timeout in seconds after an online authentication request or change password "
+"request is aborted. If possible, the authentication request is continued "
+"offline."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:235
+msgid ""
+"Verify with the help of krb5_keytab that the TGT obtained has not been "
+"spoofed. The keytab is checked for entries sequentially, and the first entry "
+"with a matching realm is used for validation. If no entry matches the realm, "
+"the last entry in the keytab is used. This process can be used to validate "
+"environments using cross-realm trust by placing the appropriate keytab entry "
+"as the last entry or the only entry in the keytab file."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:250
+msgid "krb5_keytab (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:253
+msgid ""
+"The location of the keytab to use when validating credentials obtained from "
+"KDCs."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:257
+msgid "Default: /etc/krb5.keytab"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:263
+msgid "krb5_store_password_if_offline (boolean)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:266
+msgid ""
+"Store the password of the user if the provider is offline and use it to "
+"request a TGT when the provider comes online again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:271
+msgid ""
+"NOTE: this feature is only available on Linux. Passwords stored in this way "
+"are kept in plaintext in the kernel keyring and are potentially accessible "
+"by the root user (with difficulty)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:284
+msgid "krb5_renewable_lifetime (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:287
+msgid ""
+"Request a renewable ticket with a total lifetime, given as an integer "
+"immediately followed by a time unit:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:292 sssd-krb5.5.xml:326
+msgid "<emphasis>s</emphasis> for seconds"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:295 sssd-krb5.5.xml:329
+msgid "<emphasis>m</emphasis> for minutes"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:298 sssd-krb5.5.xml:332
+msgid "<emphasis>h</emphasis> for hours"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:301 sssd-krb5.5.xml:335
+msgid "<emphasis>d</emphasis> for days."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:304
+msgid "If there is no unit given, <emphasis>s</emphasis> is assumed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:308
+msgid ""
+"NOTE: It is not possible to mix units. To set the renewable lifetime to one "
+"and a half hours, use '90m' instead of '1h30m'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:313
+msgid "Default: not set, i.e. the TGT is not renewable"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:319
+msgid "krb5_lifetime (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:322
+msgid ""
+"Request ticket with a with a lifetime, given as an integer immediately "
+"followed by a time unit:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:338
+msgid "If there is no unit given <emphasis>s</emphasis> is assumed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:342
+msgid ""
+"NOTE: It is not possible to mix units. To set the lifetime to one and a "
+"half hours please use '90m' instead of '1h30m'."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:347
+msgid ""
+"Default: not set, i.e. the default ticket lifetime configured on the KDC."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:354
+msgid "krb5_renew_interval (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:357
+msgid ""
+"The time in seconds between two checks if the TGT should be renewed. TGTs "
+"are renewed if about half of their lifetime is exceeded."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:362
+msgid "If this option is not set or is 0 the automatic renewal is disabled."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:372
+msgid "krb5_use_fast (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:375
+msgid ""
+"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
+"authentication. The following options are supported:"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:380
+msgid ""
+"<emphasis>never</emphasis> use FAST. This is equivalent to not setting this "
+"option at all."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:384
+msgid ""
+"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
+"continue the authentication without it."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:389
+msgid ""
+"<emphasis>demand</emphasis> to use FAST. The authentication fails if the "
+"server does not require fast."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:394
+msgid "Default: not set, i.e. FAST is not used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:397
+msgid "NOTE: a keytab is required to use FAST."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:400
+msgid ""
+"NOTE: SSSD supports FAST only with MIT Kerberos version 1.8 and later. If "
+"SSSD is used with an older version of MIT Kerberos, using this option is a "
+"configuration error."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd-krb5.5.xml:409
+msgid "krb5_fast_principal (string)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:412
+msgid "Specifies the server principal to use for FAST."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd-krb5.5.xml:421
+msgid ""
+"Specifies if the host and user principal should be canonicalized. This "
+"feature is available with MIT Kerberos 1.7 and later versions."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:65
+msgid ""
+"If the auth-module krb5 is used in an SSSD domain, the following options "
+"must be used. See the <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page, section "
+"<quote>DOMAIN SECTIONS</quote>, for details on the configuration of an SSSD "
+"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sssd-krb5.5.xml:443
+msgid ""
+"The following example assumes that SSSD is correctly configured and FOO is "
+"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
+"example shows only configuration of Kerberos authentication; it does not "
+"include any identity provider."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sssd-krb5.5.xml:451
+#, no-wrap
+msgid ""
+" [domain/FOO]\n"
+" auth_provider = krb5\n"
+" krb5_server = 192.168.1.1\n"
+" krb5_realm = EXAMPLE.COM\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
+msgid "sss_groupadd"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupadd.8.xml:16
+msgid "create a new group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupadd.8.xml:21
+msgid ""
+"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupadd.8.xml:32
+msgid ""
+"<command>sss_groupadd</command> creates a new group. These groups are "
+"compatible with POSIX groups, with the additional feature that they can "
+"contain other groups as members."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupadd.8.xml:43 sss_seed.8.xml:88
+msgid ""
+"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupadd.8.xml:48
+msgid ""
+"Set the GID of the group to the value of <replaceable>GID</replaceable>. If "
+"not given, it is chosen automatically."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
+msgid "sss_userdel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_userdel.8.xml:16
+msgid "delete a user account"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_userdel.8.xml:21
+msgid ""
+"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_userdel.8.xml:32
+msgid ""
+"<command>sss_userdel</command> deletes a user identified by login name "
+"<replaceable>LOGIN</replaceable> from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:44
+msgid "<option>-r</option>,<option>--remove</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:48
+msgid ""
+"Files in the user's home directory will be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:56
+msgid "<option>-R</option>,<option>--no-remove</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:60
+msgid ""
+"Files in the user's home directory will NOT be removed along with the home "
+"directory itself and the user's mail spool. Overrides the configuration."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:68
+msgid "<option>-f</option>,<option>--force</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:72
+msgid ""
+"This option forces <command>sss_userdel</command> to remove the user's home "
+"directory and mail spool, even if they are not owned by the specified user."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_userdel.8.xml:80
+msgid "<option>-k</option>,<option>--kick</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_userdel.8.xml:84
+msgid "Before actually deleting the user, terminate all his processes."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
+msgid "sss_groupdel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupdel.8.xml:16
+msgid "delete a group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupdel.8.xml:21
+msgid ""
+"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupdel.8.xml:32
+msgid ""
+"<command>sss_groupdel</command> deletes a group identified by its name "
+"<replaceable>GROUP</replaceable> from the system."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
+msgid "sss_groupshow"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_groupshow.8.xml:16
+msgid "print properties of a group"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_groupshow.8.xml:21
+msgid ""
+"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_groupshow.8.xml:32
+msgid ""
+"<command>sss_groupshow</command> displays information about a group "
+"identified by its name <replaceable>GROUP</replaceable>. The information "
+"includes the group ID number, members of the group and the parent group."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_groupshow.8.xml:43
+msgid "<option>-R</option>,<option>--recursive</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_groupshow.8.xml:47
+msgid ""
+"Also print indirect group members in a tree-like hierarchy. Note that this "
+"also affects printing parent groups - without <option>R</option>, only the "
+"direct parent will be printed."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
+msgid "sss_usermod"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_usermod.8.xml:16
+msgid "modify a user account"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_usermod.8.xml:21
+msgid ""
+"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_usermod.8.xml:32
+msgid ""
+"<command>sss_usermod</command> modifies the account specified by "
+"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
+"on the command line."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:60
+msgid "The home directory of the user account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:71
+msgid "The user's login shell."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:82
+msgid ""
+"Append this user to groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
+"a comma separated list of group names."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:96
+msgid ""
+"Remove this user from groups specified by the <replaceable>GROUPS</"
+"replaceable> parameter."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:103
+msgid "<option>-l</option>,<option>--lock</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:107
+msgid "Lock the user account. The user won't be able to log in."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_usermod.8.xml:114
+msgid "<option>-u</option>,<option>--unlock</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:118
+msgid "Unlock the user account."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_usermod.8.xml:129
+msgid "The SELinux user for the user's login."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_cache.8.xml:10 sss_cache.8.xml:15
+msgid "sss_cache"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_cache.8.xml:16
+msgid "perform cache cleanup"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_cache.8.xml:21
+msgid ""
+"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_cache.8.xml:31
+msgid ""
+"<command>sss_cache</command> invalidates records in SSSD cache. Invalidated "
+"records are forced to be reloaded from server as soon as related SSSD "
+"backend is online."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:42
+msgid ""
+"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:47
+msgid "Invalidate specific user."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:53
+msgid "<option>-U</option>,<option>--users</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:57
+msgid ""
+"Invalidate all user records. This option overrides invalidation of specific "
+"user if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:64
+msgid ""
+"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:69
+msgid "Invalidate specific group."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:75
+msgid "<option>-G</option>,<option>--groups</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:79
+msgid ""
+"Invalidate all group records. This option overrides invalidation of specific "
+"group if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:86
+msgid ""
+"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:91
+msgid "Invalidate specific netgroup."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:97
+msgid "<option>-N</option>,<option>--netgroups</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:101
+msgid ""
+"Invalidate all netgroup records. This option overrides invalidation of "
+"specific netgroup if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:108
+msgid ""
+"<option>-s</option>,<option>--service</option> <replaceable>service</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:113
+msgid "Invalidate specific service."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:119
+msgid "<option>-S</option>,<option>--services</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:123
+msgid ""
+"Invalidate all service records. This option overrides invalidation of "
+"specific service if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:130
+msgid ""
+"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:135
+msgid "Invalidate specific autofs maps."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:141
+msgid "<option>-A</option>,<option>--autofs-maps</option>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:145
+msgid ""
+"Invalidate all autofs maps. This option overrides invalidation of specific "
+"map if it was also set."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_cache.8.xml:152
+msgid ""
+"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_cache.8.xml:157
+msgid "Restrict invalidation process only to a particular domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
+msgid "sss_debuglevel"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_debuglevel.8.xml:16
+msgid "change debug level while SSSD is running"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_debuglevel.8.xml:21
+msgid ""
+"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
+"replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_debuglevel.8.xml:32
+msgid ""
+"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
+"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
+"running."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_debuglevel.8.xml:59
+msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_seed.8.xml:10 sss_seed.8.xml:15
+msgid "sss_seed"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_seed.8.xml:16
+msgid "seed the SSSD cache with a user"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_seed.8.xml:21
+msgid ""
+"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
+"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
+"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
+"arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:33
+msgid ""
+"<command>sss_seed</command> seeds the SSSD cache with a user entry and "
+"temporary password. If a user entry is already present in the SSSD cache "
+"then the entry is updated with the temporary password."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:46
+msgid ""
+"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:51
+msgid ""
+"Provide the name of the domain in which the user is a member of. The domain "
+"is also used to retrieve user information. The domain must be configured in "
+"sssd.conf. The <replaceable>DOMAIN</replaceable> option must be provided. "
+"Information retrieved from the domain overrides what is provided in the "
+"options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:63
+msgid ""
+"<option>-n</option>,<option>--username</option> <replaceable>USER</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:68
+msgid ""
+"The username of the entry to be created or modified in the cache. The "
+"<replaceable>USER</replaceable> option must be provided."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:81
+msgid "Set the UID of the user to <replaceable>UID</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:93
+msgid "Set the GID of the user to <replaceable>GID</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:117
+msgid ""
+"Set the home directory of the user to <replaceable>HOME_DIR</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:129
+msgid "Set the login shell of the user to <replaceable>SHELL</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:140
+msgid ""
+"Interactive mode for entering user information. This option will only prompt "
+"for information not provided in the options or retrieved from the domain."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_seed.8.xml:148
+msgid ""
+"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
+"replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_seed.8.xml:153
+msgid ""
+"Specify file to read user's password from. (if not specified password is "
+"prompted for)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_seed.8.xml:165
+msgid ""
+"The length of the password (or the size of file specified with -p or --"
+"password-file option) must be less than or equal to PASS_MAX bytes (64 bytes "
+"on systems with no globally-defined PASS_MAX value)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
+msgid "sss_ssh_authorizedkeys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refmeta><manvolnum>
+#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
+msgid "1"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_authorizedkeys.1.xml:16
+msgid "get OpenSSH authorized keys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_authorizedkeys.1.xml:21
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>USER</replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:32
+msgid ""
+"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
+"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
+"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> for more information)."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:41
+msgid ""
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
+"command> for public key user authentication if it is compiled with support "
+"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
+"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
+"<manvolnum>5</manvolnum></citerefentry> options."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:58
+#, no-wrap
+msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:51
+msgid ""
+"If <quote>AuthorizedKeysCommand</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by putting the following directive "
+"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
+"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_authorizedkeys.1.xml:69
+#, no-wrap
+msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_authorizedkeys.1.xml:62
+msgid ""
+"If <quote>PubkeyAgent</quote> is supported, "
+"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
+"citerefentry> can be configured to use it by using the following directive "
+"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
+"\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_authorizedkeys.1.xml:84
+msgid ""
+"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refname>
+#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
+msgid "sss_ssh_knownhostsproxy"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refnamediv><refpurpose>
+#: sss_ssh_knownhostsproxy.1.xml:16
+msgid "get OpenSSH host keys"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
+#: sss_ssh_knownhostsproxy.1.xml:21
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
+"<replaceable>options</replaceable> </arg> <arg "
+"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
+"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:33
+msgid ""
+"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
+"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
+"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
+"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
+"manvolnum></citerefentry> for more information) <filename>/var/lib/sss/"
+"pubconf/known_hosts</filename> and estabilishes connection to the host."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:43
+msgid ""
+"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
+"create the connection to the host instead of opening a socket."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><programlisting>
+#: sss_ssh_knownhostsproxy.1.xml:55
+#, no-wrap
+msgid ""
+"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
+"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para>
+#: sss_ssh_knownhostsproxy.1.xml:48
+msgid ""
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
+"command> for host key authentication by using the following directives for "
+"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
+"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
+#: sss_ssh_knownhostsproxy.1.xml:66
+msgid ""
+"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:71
+msgid ""
+"Use port <replaceable>PORT</replaceable> to connect to the host. By "
+"default, port 22 is used."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
+#: sss_ssh_knownhostsproxy.1.xml:83
+msgid ""
+"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/service_discovery.xml:2
+msgid "SERVICE DISCOVERY"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/service_discovery.xml:4
+msgid ""
+"The service discovery feature allows back ends to automatically find the "
+"appropriate servers to connect to using a special DNS query. This feature is "
+"not supported for backup servers."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:9 include/ldap_id_mapping.xml:57
+msgid "Configuration"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:11
+msgid ""
+"If no servers are specified, the back end automatically uses service "
+"discovery to try to find a server. Optionally, the user may choose to use "
+"both fixed server addresses and service discovery by inserting a special "
+"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
+"preference is maintained. This feature is useful if, for example, the user "
+"prefers to use service discovery whenever possible, and fall back to a "
+"specific server when no servers can be discovered using DNS."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:23
+msgid "The domain name"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:25
+msgid ""
+"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
+"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+"manvolnum> </citerefentry> manual page for more details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:35
+msgid "The protocol"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:37
+msgid ""
+"The queries usually specify _tcp as the protocol. Exceptions are documented "
+"in respective option description."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/service_discovery.xml:42
+msgid "See Also"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/service_discovery.xml:44
+msgid ""
+"For more information on the service discovery mechanism, refer to RFC 2782."
+msgstr ""
+
+#. type: Content of: outside any tag (error?)
+#: include/upstream.xml:1
+msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/failover.xml:2
+msgid "FAILOVER"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/failover.xml:4
+msgid ""
+"The failover feature allows back ends to automatically switch to a different "
+"server if the current server fails."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:8
+msgid "Failover Syntax"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:10
+msgid ""
+"The list of servers is given as a comma-separated list; any number of spaces "
+"is allowed around the comma. The servers are listed in order of preference. "
+"The list can contain any number of servers."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:16
+msgid ""
+"For each failover-enabled config option, two variants exist: "
+"<emphasis>primary</emphasis> and <emphasis>backup</emphasis>. The idea is "
+"that servers in the primary list are preferred and backup servers are only "
+"searched if no primary servers can be reached. If a backup server is "
+"selected, a timeout of 31 seconds is set. After this timeout SSSD will "
+"periodically try to reconnect to one of the primary servers. If it succeeds, "
+"it will replace the current active (backup) server."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/failover.xml:27
+msgid "The Failover Mechanism"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:29
+msgid ""
+"The failover mechanism distinguishes between a machine and a service. The "
+"back end first tries to resolve the hostname of a given machine; if this "
+"resolution attempt fails, the machine is considered offline. No further "
+"attempts are made to connect to this machine for any other service. If the "
+"resolution attempt succeeds, the back end tries to connect to a service on "
+"this machine. If the service connection attempt fails, then only this "
+"particular service is considered offline and the back end automatically "
+"switches over to the next service. The machine is still considered online "
+"and might still be tried for another service."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:42
+msgid ""
+"Further connection attempts are made to machines or services marked as "
+"offline after a specified period of time; this is currently hard coded to 30 "
+"seconds."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/failover.xml:47
+msgid ""
+"If there are no more machines to try, the back end as a whole switches to "
+"offline mode, and then attempts to reconnect every 30 seconds."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/ldap_id_mapping.xml:2
+msgid "ID MAPPING"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:4
+msgid ""
+"The ID-mapping feature allows SSSD to act as a client of Active Directory "
+"without requiring administrators to extend user attributes to support POSIX "
+"attributes for user and group identifiers."
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/ldap_id_mapping.xml:9
+msgid ""
+"NOTE: When ID-mapping is enabled, the uidNumber and gidNumber attributes are "
+"ignored. This is to avoid the possibility of conflicts between automatically-"
+"assigned and manually-assigned values. If you need to use manually-assigned "
+"values, ALL values must be manually-assigned."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><title>
+#: include/ldap_id_mapping.xml:17
+msgid "Mapping Algorithm"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:19
+msgid ""
+"Active Directory provides an objectSID for every user and group object in "
+"the directory. This objectSID can be broken up into components that "
+"represent the Active Directory domain identity and the relative identifier "
+"(RID) of the user or group object."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:25
+msgid ""
+"The SSSD ID-mapping algorithm takes a range of available UIDs and divides it "
+"into equally-sized component sections - called \"slices\"-. Each slice "
+"represents the space available to an Active Directory domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:31
+msgid ""
+"When a user or group entry for a particular domain is encountered for the "
+"first time, the SSSD allocates one of the available slices for that domain. "
+"In order to make this slice-assignment repeatable on different client "
+"machines, we select the slice based on the following algorithm:"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:38
+msgid ""
+"The SID string is passed through the murmurhash3 algorithm to convert it to "
+"a 32-bit hashed value. We then take the modulus of this value with the total "
+"number of available slices to pick the slice."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:44
+msgid ""
+"NOTE: It is possible to encounter collisions in the hash and subsequent "
+"modulus. In these situations, we will select the next available slice, but "
+"it may not be possible to reproduce the same exact set of slices on other "
+"machines (since the order that they are encountered will determine their "
+"slice). In this situation, it is recommended to either switch to using "
+"explicit POSIX attributes in Active Directory (disabling ID-mapping) or "
+"configure a default domain to guarantee that at least one is always "
+"consistent. See <quote>Configuration</quote> for details."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:59
+msgid ""
+"Minimum configuration (in the <quote>[domain/DOMAINNAME]</quote> section):"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para><programlisting>
+#: include/ldap_id_mapping.xml:64
+#, no-wrap
+msgid ""
+"ldap_id_mapping = True\n"
+"ldap_schema = ad\n"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><para>
+#: include/ldap_id_mapping.xml:69
+msgid ""
+"The default configuration results in configuring 10,000 slices, each capable "
+"of holding up to 200,000 IDs, starting from 10,001 and going up to "
+"2,000,100,000. This should be sufficient for most deployments."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><title>
+#: include/ldap_id_mapping.xml:75
+msgid "Advanced Configuration"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:78
+msgid "ldap_idmap_range_min (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:81
+msgid ""
+"Specifies the lower bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:85
+msgid ""
+"NOTE: This option is different from <quote>min_id</quote> in that "
+"<quote>min_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>min_id</"
+"quote> be less-than or equal to <quote>ldap_idmap_range_min</quote>"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:95 include/ldap_id_mapping.xml:131
+msgid "Default: 200000"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:100
+msgid "ldap_idmap_range_max (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:103
+msgid ""
+"Specifies the upper bound of the range of POSIX IDs to use for mapping "
+"Active Directory user and group SIDs."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:107
+msgid ""
+"NOTE: This option is different from <quote>max_id</quote> in that "
+"<quote>max_id</quote> acts to filter the output of requests to this domain, "
+"whereas this option controls the range of ID assignment. This is a subtle "
+"distinction, but the good general advice would be to have <quote>max_id</"
+"quote> be greater-than or equal to <quote>ldap_idmap_range_max</quote>"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:117
+msgid "Default: 2000200000"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:122
+msgid "ldap_idmap_range_size (integer)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:125
+msgid ""
+"Specifies the number of IDs available for each slice. If the range size "
+"does not divide evenly into the min and max values, it will create as many "
+"complete slices as it can."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:136
+msgid "ldap_idmap_default_domain_sid (string)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:139
+msgid ""
+"Specify the domain SID of the default domain. This will guarantee that this "
+"domain will always be assigned to slice zero in the ID map, bypassing the "
+"murmurhash algorithm described above."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:150
+msgid "ldap_idmap_default_domain (string)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:153
+msgid "Specify the name of the default domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
+#: include/ldap_id_mapping.xml:161
+msgid "ldap_idmap_autorid_compat (boolean)"
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:164
+msgid ""
+"Changes the behavior of the ID-mapping algorithm to behave more similarly to "
+"winbind's <quote>idmap_autorid</quote> algorithm."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:169
+msgid ""
+"When this option is configured, domains will be allocated starting with "
+"slice zero and increasing monatomically with each additional domain."
+msgstr ""
+
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: include/ldap_id_mapping.xml:174
+msgid ""
+"NOTE: This algorithm is non-deterministic (it depends on the order that "
+"users and groups are requested). If this mode is required for compatibility "
+"with machines running winbind, it is recommended to also use the "
+"<quote>ldap_idmap_default_domain_sid</quote> option to guarantee that at "
+"least one domain is consistently allocated to slice zero."
+msgstr ""
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help.xml:3
+msgid "<option>-?</option>,<option>--help</option>"
+msgstr ""
+
+#. type: Content of: <varlistentry><listitem><para>
+#: include/param_help.xml:7 include/param_help_py.xml:7
+msgid "Display help message and exit."
+msgstr ""
+
+#. type: Content of: <varlistentry><term>
+#: include/param_help_py.xml:3
+msgid "<option>-h</option>,<option>--help</option>"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:3
+msgid ""
+"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
+"default value as well as the lowest allowed value, 0xFFF0 is the most "
+"verbose mode. This setting overrides the settings from config file."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:8
+msgid "Currently supported debug levels:"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:11
+msgid ""
+"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
+"SSSD from starting up or causes it to cease running."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:15
+msgid ""
+"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
+"the SSSD, but one that indicates that at least one major feature is not "
+"going to work properly."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:20
+msgid ""
+"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
+"particular request or operation has failed."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:24
+msgid ""
+"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
+"percolate down to cause the operation failure of 2."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:28
+msgid "<emphasis>0x0100</emphasis>: Configuration settings."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:31
+msgid "<emphasis>0x0200</emphasis>: Function data."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:34
+msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:37
+msgid ""
+"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:40
+msgid ""
+"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
+"may be interesting."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:43
+msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:46
+msgid ""
+"To log required debug levels, simply add their numbers together as shown in "
+"following examples:"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:49
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
+"serious failures and function data use 0x0270."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:53
+msgid ""
+"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
+"function data, trace messages for internal control functions use 0x1310."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/debug_levels.xml:57
+msgid ""
+"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
+"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
+msgstr ""
+
+#. type: Content of: outside any tag (error?)
+#: include/experimental.xml:1
+msgid ""
+"<emphasis> This is an experimental feature, please use http://fedorahosted."
+"org/sssd to report any issues. </emphasis>"
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/local.xml:2
+msgid "THE LOCAL DOMAIN"
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:4
+msgid ""
+"In order to function correctly, a domain with <quote>id_provider=local</"
+"quote> must be created and the SSSD must be running."
+msgstr ""
+
+#. type: Content of: <refsect1><para>
+#: include/local.xml:9
+msgid ""
+"The administrator might want to use the SSSD local users instead of "
+"traditional UNIX users in cases where the group nesting (see <citerefentry> "
+"<refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</manvolnum> </"
+"citerefentry>) is needed. The local users are also useful for testing and "
+"development of the SSSD without having to deploy a full remote server. The "
+"<command>sss_user*</command> and <command>sss_group*</command> tools use a "
+"local LDB storage to store users and groups."
+msgstr ""
+
+#. type: Content of: <refsect1><title>
+#: include/seealso.xml:2
+msgid "SEE ALSO"
+msgstr "SE ÄVEN"
+
+#. type: Content of: <refsect1><para>
+#: include/seealso.xml:4
+msgid ""
+"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
+"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
+"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
+"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
+"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
+"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, <citerefentry> "
+"<refentrytitle>sss_ssh_knowhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
+"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:3
+#: include/ldap_search_bases_experimental.xml:3
+msgid ""
+"An optional base DN, search scope and LDAP filter to restrict LDAP searches "
+"for this attribute type."
+msgstr ""
+
+#. type: Content of: <listitem><para><programlisting>
+#: include/ldap_search_bases.xml:9
+#: include/ldap_search_bases_experimental.xml:9
+#, no-wrap
+msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:7
+#: include/ldap_search_bases_experimental.xml:7
+msgid "syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:13
+#: include/ldap_search_bases_experimental.xml:13
+msgid ""
+"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
+"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
+"rfc2254.txt"
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:19
+#: include/ldap_search_bases_experimental.xml:19
+msgid ""
+"For examples of this syntax, please refer to the <quote>ldap_search_base</"
+"quote> examples section."
+msgstr ""
+
+#. type: Content of: <listitem><para>
+#: include/ldap_search_bases.xml:27
+#: include/ldap_search_bases_experimental.xml:27
+msgid ""
+"Please note that specifying scope or filter is not supported for searches "
+"against an Active Directory Server that might yield a large number of "
+"results and trigger the Range Retrieval extension in the response."
+msgstr ""
+
+#. type: Content of: <para>
+#: include/autofs_restart.xml:2
+msgid ""
+"Please note that the automounter only reads the master map on startup, so if "
+"any autofs-related changes are made to the sssd.conf, you typically also "
+"need to restart the automounter daemon after restarting the SSSD."
+msgstr ""
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr "Lägg till ett attribut/värde-par. Formatet är attrnamn=värde."
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Sätt ett attribut till ett namn/värde-par. Formatet är attrnamn=värde. "
+#~ "För flervärda attribut ersätter kommandot de värden som redan finns."
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Ta bort ett attribut/värde-par. Formatet är attrnamn=värde."
diff --git a/src/man/po/tg.po b/src/man/po/tg.po
index 114d0da40..392718c07 100644
--- a/src/man/po/tg.po
+++ b/src/man/po/tg.po
@@ -7,10 +7,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Tajik (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Tajik (http://www.transifex.com/projects/p/sssd/language/"
"tg/)\n"
"Language: tg\n"
"MIME-Version: 1.0\n"
@@ -5568,8 +5568,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: memberUser"
-msgstr ""
+msgstr "Пешфарз: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5585,8 +5587,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: memberHost"
-msgstr ""
+msgstr "Пешфарз: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5602,8 +5606,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr ""
+msgstr "Пешфарз: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
@@ -5617,8 +5623,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: 0 (unlimited)"
msgid "Default: nisDomainName"
-msgstr ""
+msgstr "Пешфарз: 0 (номаҳдуд)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
@@ -5632,8 +5640,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "Пешфарз: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5647,8 +5657,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: fqdn"
-msgstr ""
+msgstr "Пешфарз: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5702,8 +5714,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "Пешфарз: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5717,8 +5731,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: password"
msgid "Default: ipaSELinuxUser"
-msgstr ""
+msgstr "Пешфарз: парол"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
@@ -5734,8 +5750,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaEnabledFlag"
-msgstr ""
+msgstr "Пешфарз: false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
@@ -5749,8 +5767,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: userCategory"
-msgstr ""
+msgstr "Пешфарз: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
@@ -5764,8 +5784,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: hostCategory"
-msgstr ""
+msgstr "Пешфарз: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
@@ -5779,8 +5801,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: true"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "Пешфарз: true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
@@ -5794,8 +5818,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr ""
+msgstr "Пешфарз: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
diff --git a/src/man/po/uk.po b/src/man/po/uk.po
index 56d97a5f4..82170a7f5 100644
--- a/src/man/po/uk.po
+++ b/src/man/po/uk.po
@@ -4,17 +4,17 @@
#
# Translators:
# sgallagh <sgallagh@redhat.com>, 2011
-# Yuri Chornoivan <yurchor@ukr.net>, 2011-2013
+# Yuri Chornoivan <yurchor@ukr.net>, 2011-2014
# Yuri Chornoivan <yurchor@ukr.net>, 2013
msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 13:30+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-23 16:22+0000\n"
"Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
-"Language-Team: Ukrainian (http://www.transifex.com/projects/p/fedora/"
-"language/uk/)\n"
+"Language-Team: Ukrainian (http://www.transifex.com/projects/p/sssd/language/"
+"uk/)\n"
"Language: uk\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@@ -269,6 +269,13 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:89
+#, fuzzy
+#| msgid ""
+#| "Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</"
+#| "phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
+#| "condition=\"with_ssh\">, ssh</phrase> <phrase condition="
+#| "\"with_pac_responder\">, pac</phrase> <phrase condition=\"with_ifp\">, "
+#| "ifp</phrase>"
msgid ""
"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
@@ -278,7 +285,7 @@ msgstr ""
"Підтримувані служби: nss, pam <phrase condition=\"with_sudo\">, sudo</"
"phrase> <phrase condition=\"with_autofs\">, autofs</phrase> <phrase "
"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
-"\">, pac</phrase>"
+"\">, pac</phrase> <phrase condition=\"with_ifp\">, ifp</phrase>"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:98 sssd.conf.5.xml:290
@@ -903,12 +910,15 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd.conf.5.xml:490 sssd.conf.5.xml:514 sssd-ad.5.xml:169
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "fallback_homedir = /home/%u\n"
+#| " "
msgid ""
"override_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
@@ -959,12 +969,19 @@ msgstr "override_shell (рядок)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:527
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
msgid ""
"Override the login shell for all users. This option can be specified "
"globally in the [nss] section or per-domain."
msgstr ""
-"Перевизначити оболонку реєстрації для всіх користувачів. Цей параметр можна "
-"вказати на загальному рівні у розділі [nss] або для кожного з доменів окремо."
+"Перевизначити командну оболонку входу до системи для усіх користувачів. Цей "
+"параметр має пріоритет над будь-якими іншими параметрами визначення "
+"командної оболонки, якщо він діє. Його можна встановити або у розділі [nss] "
+"або для кожного з доменів окремо."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:532
@@ -1067,16 +1084,20 @@ msgstr "default_shell"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:593 sssd-ad.5.xml:206
+#, fuzzy
+#| msgid ""
+#| "Override the login shell for all users. This option supersedes any other "
+#| "shell options if it takes effect and can be set either in the [nss] "
+#| "section or per-domain."
msgid ""
"The default shell to use if the provider does not return one during lookup. "
"This option supersedes any other shell options if it takes effect and can be "
"set either in the [nss] section or per-domain."
msgstr ""
-"Типова командна оболонка, яку слід використовувати, якщо засобом надання "
-"даних не повернуто даних оболонки під час пошуку. Якщо буде використано цей "
-"параметр, він матиме пріоритет над будь-якими іншими параметрами визначення "
-"командної оболонки. Його можна визначити або у розділі [nss] або для "
-"окремого домену."
+"Перевизначити командну оболонку входу до системи для усіх користувачів. Цей "
+"параметр має пріоритет над будь-якими іншими параметрами визначення "
+"командної оболонки, якщо він діє. Його можна встановити або у розділі [nss] "
+"або для кожного з доменів окремо."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:599 sssd-ad.5.xml:212
@@ -1329,8 +1350,10 @@ msgstr "Параметри налаштування SUDO"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure the autofs service."
msgid "These options can be used to configure the sudo service."
-msgstr "Цими параметрами можна скористатися для налаштування служби sudo."
+msgstr "Цими параметрами можна скористатися для налаштування служби autofs."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -1764,13 +1787,16 @@ msgstr "refresh_expired_interval (ціле число)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1110
+#, fuzzy
+#| msgid ""
+#| "Specifies how many seconds SSSD has to wait before refreshing its cache "
+#| "of enumerated records."
msgid ""
"Specifies how many seconds SSSD has to wait before refreshing expired "
"records. Currently only refreshing expired netgroups is supported."
msgstr ""
"Визначає кількість секунд, протягом яких SSSD має очікувати до оновлення "
-"застаріших записів. У поточній версії передбачено підтримку оновлення лише "
-"застарілих записів мережевих груп."
+"свого кешу нумерованих записів."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1115
@@ -2565,20 +2591,20 @@ msgstr "subdomain_homedir (рядок)"
#: sssd.conf.5.xml:1714
#, fuzzy
#| msgid ""
-#| "Use this homedir as default value for all subdomains within this domain. "
-#| "See <emphasis>override_homedir</emphasis> for info about possible values. "
-#| "In addition to those, the expansion below can only be used with "
-#| "<emphasis>subdomain_homedir</emphasis>. <placeholder type=\"variablelist"
-#| "\" id=\"0\"/>"
+#| "Use this homedir as default value for all subdomains within this domain "
+#| "in IPA AD trust. See <emphasis>override_homedir</emphasis> for info "
+#| "about possible values. In addition to those, the expansion below can only "
+#| "be used with <emphasis>subdomain_homedir</emphasis>. <placeholder type="
+#| "\"variablelist\" id=\"0\"/>"
msgid ""
"Use this homedir as default value for all subdomains within this domain. See "
"<emphasis>override_homedir</emphasis> for info about possible values."
msgstr ""
"Використовувати вказаний домашній каталог як типовий для всіх піддоменів у "
-"цьому домені. Дані щодо можливих значень наведено у описі параметра "
-"<emphasis>override_homedir</emphasis>. Крім того, розгортання можна "
-"використовувати лише з <emphasis>subdomain_homedir</emphasis>. <placeholder "
-"type=\"variablelist\" id=\"0\"/>"
+"цьому домені у межах довіри AD IPA. Дані щодо можливих значень наведено у "
+"описі параметра <emphasis>override_homedir</emphasis>. Крім того, "
+"розгортання можна використовувати лише з <emphasis>subdomain_homedir</"
+"emphasis>. <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1719
@@ -4994,6 +5020,19 @@ msgstr "ldap_access_filter (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1680
+#, fuzzy
+#| msgid ""
+#| "If using access_provider = ldap and ldap_access_order = filter (default), "
+#| "this option is mandatory. It specifies an LDAP search filter criteria "
+#| "that must be met for the user to be granted access on this host. If "
+#| "access_provider = ldap, ldap_access_order = filter and this option is not "
+#| "set, it will result in all users being denied access. Use "
+#| "access_provider = permit to change this default behavior. Please note "
+#| "that this filter is applied on the LDAP user entry only and thus "
+#| "filtering based on nested groups may not work (e.g. memberOf attribute on "
+#| "AD entries points only to direct parents). If filtering based on nested "
+#| "groups is required, please see <citerefentry> <refentrytitle>sssd-simple</"
+#| "refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
msgid ""
"If using access_provider = ldap and ldap_access_order = filter (default), "
"this option is mandatory. It specifies an LDAP search filter criteria that "
@@ -5008,7 +5047,13 @@ msgstr ""
"доступу до цього вузла. Якщо визначено access_provider = ldap та "
"ldap_access_order = filter, а цей параметр не встановлено, доступ буде "
"заборонено всім користувачам. Щоб змінити таку типову поведінку системи, "
-"скористайтеся параметром access_provider = permit"
+"скористайтеся параметром access_provider = permit. Будь ласка, зауважте, що "
+"цей фільтр застосовуватиметься лише до запису користувача LDAP, отже "
+"фільтрування, засноване на вкладених групах може не працювати (наприклад, "
+"атрибут memberOf для записів AD вказує лише на безпосередні батьківські "
+"записи). Якщо вам потрібне фільтрування, засноване на вкладених групах, будь "
+"ласка, скористайтеся параметром <citerefentry> <refentrytitle>sssd-simple</"
+"refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1692 sssd-ldap.5.xml:2279
@@ -5017,23 +5062,32 @@ msgstr "Приклад:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:1695
-#, no-wrap
+#, fuzzy, no-wrap
+#| msgid ""
+#| "access_provider = ldap\n"
+#| "ldap_access_filter = (employeeType=admin)\n"
+#| " "
msgid ""
"access_provider = ldap\n"
"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
" "
msgstr ""
"access_provider = ldap\n"
-"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
+"ldap_access_filter = (employeeType=admin)\n"
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1699
+#, fuzzy
+#| msgid ""
+#| "This example means that access to this host is restricted to users whose "
+#| "employeeType attribute is set to \"admin\"."
msgid ""
"This example means that access to this host is restricted to members of the "
"\"allowedusers\" group in ldap."
msgstr ""
-"У прикладі доступ до вузла обмежено учасниками групи «allowedusers» у LDAP."
+"У прикладі доступ до цього вузла обмежено користувачами, чий атрибут "
+"employeeType встановлено у значення «admin»."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1704
@@ -5736,6 +5790,12 @@ msgstr "Типове значення: automountInformation"
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2170
+#, fuzzy
+#| msgid ""
+#| "<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
+#| "\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
+#| "<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
+#| "\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
msgid ""
"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
@@ -5745,7 +5805,7 @@ msgstr ""
"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
-"\"variablelist\" id=\"4\"/>"
+"\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2243
@@ -5769,8 +5829,10 @@ msgstr "ldap_group_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
+#, fuzzy
+#| msgid "ldap_user_search_base (string)"
msgid "ldap_user_search_filter (string)"
-msgstr "ldap_user_search_filter (рядок)"
+msgstr "ldap_user_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
@@ -5778,8 +5840,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict user searches."
msgstr ""
-"За допомогою цього параметра можна визначити додатковий критерій "
-"фільтрування LDAP, яким буде обмежено пошук користувачів."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2272
@@ -5787,8 +5847,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_user_search_base."
msgstr ""
-"Цей параметр вважається <emphasis>застарілим</emphasis>. Варто "
-"використовувати синтаксичні конструкції з ldap_user_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:2282
@@ -5797,8 +5855,6 @@ msgid ""
" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
" "
msgstr ""
-" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
-" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2285
@@ -5806,13 +5862,13 @@ msgid ""
"This filter would restrict user searches to users that have their shell set "
"to /bin/tcsh."
msgstr ""
-"За допомогою цього фільтра можна обмежити пошук користувачів, лише тими, для "
-"яких встановлено командну оболонку /bin/tcsh."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2292
+#, fuzzy
+#| msgid "ldap_group_search_base (string)"
msgid "ldap_group_search_filter (string)"
-msgstr "ldap_group_search_filter (рядок)"
+msgstr "ldap_group_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2295
@@ -5820,8 +5876,6 @@ msgid ""
"This option specifies an additional LDAP search filter criteria that "
"restrict group searches."
msgstr ""
-"За допомогою цього параметра можна визначити додатковий критерій "
-"фільтрування LDAP, яким буде обмежено пошук груп."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2299
@@ -5829,8 +5883,6 @@ msgid ""
"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
"by ldap_group_search_base."
msgstr ""
-"Цей параметр вважається <emphasis>застарілим</emphasis>. Варто "
-"використовувати синтаксичні конструкції з ldap_group_search_base."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2309
@@ -5931,6 +5983,16 @@ msgstr "модуль PAM для SSSD"
#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: pam_sss.8.xml:24
+#, fuzzy
+#| msgid ""
+#| "<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
+#| "replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> "
+#| "</arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</"
+#| "replaceable> </arg>"
msgid ""
"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
@@ -5939,11 +6001,13 @@ msgid ""
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
"arg>"
msgstr ""
-"<command>pam_sss.so</command> <arg choice='opt'> <arg choice='opt'> "
-"<replaceable>quiet</replaceable> </arg> <replaceable>forward_pass</"
+"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
+"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> </"
+"arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</replaceable> </"
"arg>"
#. type: Content of: <reference><refentry><refsect1><para>
@@ -6108,6 +6172,19 @@ msgstr "sssd_krb5_locator_plugin"
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:22
+#, fuzzy
+#| msgid ""
+#| "The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> "
+#| "is used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
+#| "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the "
+#| "Kerberos libraries what Realm and which KDC to use. Typically this is "
+#| "done in <citerefentry> <refentrytitle>krb5.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> which is always read by the "
+#| "Kerberos libraries. To simplify the configuration the Realm and the KDC "
+#| "can be defined in <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+#| "<manvolnum>5</manvolnum> </citerefentry> as described in <citerefentry> "
+#| "<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
+#| "citerefentry>"
msgid ""
"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
@@ -6131,7 +6208,7 @@ msgstr ""
"Kerberos. Щоб спростити налаштування, область та KDC можна визначити у "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> у спосіб, описаний на сторінці довідки "
-"<citerefentry> <refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</"
+"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry>"
#. type: Content of: <reference><refentry><refsect1><para>
@@ -6576,9 +6653,6 @@ msgid ""
"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
"will be ignored."
msgstr ""
-"Якщо вказано фільтрування за довільною базою пошуку і встановлено значення "
-"False для <emphasis>ipa_hbac_support_srchost</emphasis>, фільтр буде "
-"проігноровано."
#. type: Content of: <listitem><para>
#: sssd-ipa.5.xml:179 sssd-ipa.5.xml:198 include/ldap_search_bases.xml:23
@@ -6749,8 +6823,10 @@ msgstr "Типове значення: DENY_ALL"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:333
+#, fuzzy
+#| msgid "ipa_enable_dns_sites (boolean)"
msgid "ipa_hbac_support_srchost (boolean)"
-msgstr "ipa_hbac_support_srchost (булеве значення)"
+msgstr "ipa_enable_dns_sites (булеве значення)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:336
@@ -6758,8 +6834,6 @@ msgid ""
"If this is set to false, then srchost as given to SSSD by PAM will be "
"ignored."
msgstr ""
-"Якщо встановлено значення «false», значення srchost, вказане SSSD на основі "
-"даних PAM, буде проігноровано."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:340
@@ -6767,9 +6841,6 @@ msgid ""
"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
msgstr ""
-"Зауважте, що якщо встановлено значення <emphasis>False</emphasis>, фільтри, "
-"вказані за допомогою параметра <emphasis>ipa_host_search_base</emphasis>, "
-"буде проігноровано;"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:351
@@ -6789,271 +6860,368 @@ msgstr "Типове значення: адреса з назвою \"default\""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:364
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_of (string)"
-msgstr "ipa_netgroup_member_of (рядок)"
+msgstr "ldap_netgroup_member (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:367
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid "The LDAP attribute that lists netgroup's memberships."
-msgstr "Атрибут LDAP зі списком учасників мережевої групи."
+msgstr "Атрибут LDAP зі списком груп, у яких бере участь користувач."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:376
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_user (string)"
-msgstr "ipa_netgroup_member_user (рядок)"
+msgstr "ldap_netgroup_member (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:379
+#, fuzzy
+#| msgid "The LDAP attribute that lists the user's group memberships."
msgid ""
"The LDAP attribute that lists system users and groups that are direct "
"members of the netgroup."
-msgstr ""
-"Атрибут LDAP зі списком користувачів та груп системи, які є безпосередніми "
-"учасниками мережевої групи."
+msgstr "Атрибут LDAP зі списком груп, у яких бере участь користувач."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberUser"
-msgstr "Типове значення: memberUser"
+msgstr "Типове значення: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_host (string)"
-msgstr "ipa_netgroup_member_host (рядок)"
+msgstr "ldap_netgroup_member (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists hosts and host groups that are direct members "
"of the netgroup."
msgstr ""
-"Атрибут LDAP зі списком вузлів та груп вузлів, які є безпосередніми "
-"учасниками мережевої групи."
+"Атрибут LDAP, у якому містяться імена учасників мережевої групи (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: memberOf"
msgid "Default: memberHost"
-msgstr "Типове значення: memberHost"
+msgstr "Типове значення: memberOf"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
+#, fuzzy
+#| msgid "ldap_netgroup_member (string)"
msgid "ipa_netgroup_member_ext_host (string)"
-msgstr "ipa_netgroup_member_ext_host (рядок)"
+msgstr "ldap_netgroup_member (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:404
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that lists FQDNs of hosts and host groups that are "
"members of the netgroup."
msgstr ""
-"Атрибут LDAP зі списком FQDN вузлів та груп вузлів, які є учасниками "
-"мережевої групи."
+"Атрибут LDAP, у якому містяться імена учасників мережевої групи (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:408
+#, fuzzy
+#| msgid "Default: root"
msgid "Default: externalHost"
-msgstr "Типове значення: externalHost"
+msgstr "Типове значення: root"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:413
+#, fuzzy
+#| msgid "ipa_domain (string)"
msgid "ipa_netgroup_domain (string)"
-msgstr "ipa_netgroup_domain (рядок)"
+msgstr "ipa_domain (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:416
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid "The LDAP attribute that contains NIS domain name of the netgroup."
msgstr ""
-"Атрибут LDAP, у якому міститься доменна назва NIS мережевої групи (netgroup)."
+"Атрибут LDAP, у якому містяться імена учасників мережевої групи (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:420
+#, fuzzy
+#| msgid "Default: none"
msgid "Default: nisDomainName"
-msgstr "Типове значення: nisDomainName"
+msgstr "Типове значення: none"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:426
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_host_object_class (string)"
-msgstr "ipa_host_object_class (рядок)"
+msgstr "ldap_user_object_class (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:429 sssd-ipa.5.xml:452
+#, fuzzy
+#| msgid "The object class of a user entry in LDAP."
msgid "The object class of a host entry in LDAP."
-msgstr "Клас об’єктів запису вузла у LDAP."
+msgstr "Клас об’єктів запису користувача у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: ipaHost"
-msgstr "Типове значення: ipaHost"
+msgstr "Типове значення: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
+#, fuzzy
+#| msgid "ipa_hostname (string)"
msgid "ipa_host_fqdn (string)"
-msgstr "ipa_host_fqdn (рядок)"
+msgstr "ipa_hostname (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:440
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains FQDN of the host."
-msgstr "Атрибут LDAP, що містить FQDN вузла."
+msgstr "Атрибут LDAP, у якому містяться імена учасників групи."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: cn"
msgid "Default: fqdn"
-msgstr "Типове значення: fqdn"
+msgstr "Типове значення: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
+#, fuzzy
+#| msgid "ldap_user_object_class (string)"
msgid "ipa_selinux_usermap_object_class (string)"
-msgstr "ipa_selinux_usermap_object_class (рядок)"
+msgstr "ldap_user_object_class (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:460
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_name (string)"
-msgstr "ipa_selinux_usermap_name (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:463
+#, fuzzy
+#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the name of SELinux usermap."
-msgstr "Атрибут LDAP, що містить назву карти користувачів SELinux."
+msgstr "Атрибут LDAP, у якому містяться імена учасників групи."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:472
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_user (string)"
-msgstr "ipa_selinux_usermap_member_user (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:475
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid ""
"The LDAP attribute that contains all users / groups this rule match against."
-msgstr ""
-"Атрибут LDAP, що містить список всіх користувачів і груп, яких стосується це "
-"правило."
+msgstr "Атрибут LDAP, який містить відкриті ключі SSH користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_member_host (string)"
-msgstr "ipa_selinux_usermap_member_host (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the (host, user, domain) netgroup "
+#| "triples."
msgid ""
"The LDAP attribute that contains all hosts / hostgroups this rule match "
"against."
msgstr ""
-"Атрибут LDAP, що містить список всіх вузлів і груп вузлів, яких стосується "
-"це правило."
+"Атрибут LDAP, що містить трійки мережевої групи (вузол, користувач, домен)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:496
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_see_also (string)"
-msgstr "ipa_selinux_usermap_see_also (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:499
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the names of the netgroup's members."
msgid ""
"The LDAP attribute that contains DN of HBAC rule which can be used for "
"matching instead of memberUser and memberHost"
msgstr ""
-"Атрибут LDAP, що містить назву домену правила HBAC, яким можна користуватися "
-"для встановлення відповідності замість memberUser і memberHost."
+"Атрибут LDAP, у якому містяться імена учасників мережевої групи (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: ou"
msgid "Default: seeAlso"
-msgstr "Типове значення: seeAlso"
+msgstr "Типове значення: ou"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_selinux_user (string)"
-msgstr "ipa_selinux_usermap_selinux_user (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains SELinux user string itself."
-msgstr "Атрибут LDAP, який містить сам рядок користувача SELinux."
+msgstr "Атрибут LDAP, який містить відкриті ключі SSH користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:516
+#, fuzzy
+#| msgid "Default: sudoUser"
msgid "Default: ipaSELinuxUser"
-msgstr "Типове значення: ipaSELinuxUser"
+msgstr "Типове значення: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:521
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_enabled (string)"
-msgstr "ipa_selinux_usermap_enabled (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:524
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid ""
"The LDAP attribute that contains whether or not is user map enabled for "
"usage."
msgstr ""
-"Атрибут LDAP, що містить дані щодо того, чи можна користуватися картою "
-"користувачів."
+"Атрибут LDAP, що містить шлях до типової командної оболонки користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:528
+#, fuzzy
+#| msgid "Default: loginDisabled"
msgid "Default: ipaEnabledFlag"
-msgstr "Типове значення: ipaEnabledFlag"
+msgstr "Типове значення: loginDisabled"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:533
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_user_category (string)"
-msgstr "ipa_selinux_usermap_user_category (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:536
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains user category such as 'all'."
-msgstr "Атрибут LDAP, що містить категорію користувачів, зокрема 'all'."
+msgstr "Атрибут LDAP, який містить відкриті ключі SSH користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:540
+#, fuzzy
+#| msgid "Default: try"
msgid "Default: userCategory"
-msgstr "Типове значення: userCategory"
+msgstr "Типове значення: try"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:545
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_host_category (string)"
-msgstr "ipa_selinux_usermap_host_category (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:548
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the path to the user's default shell."
msgid "The LDAP attribute that contains host category such as 'all'."
-msgstr "Атрибут LDAP, що містить категорію вузлів, зокрема 'all'."
+msgstr ""
+"Атрибут LDAP, що містить шлях до типової командної оболонки користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
+#, fuzzy
+#| msgid "Default: host"
msgid "Default: hostCategory"
-msgstr "Типове значення: hostCategory"
+msgstr "Типове значення: host"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:557
+#, fuzzy
+#| msgid "ipa_selinux_search_base (string)"
msgid "ipa_selinux_usermap_uuid (string)"
-msgstr "ipa_selinux_usermap_uuid (рядок)"
+msgstr "ipa_selinux_search_base (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:560
+#, fuzzy
+#| msgid ""
+#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains unique ID of the user map."
-msgstr "Атрибут LDAP, що містить унікальний ідентифікатор карти користувачів."
+msgstr "Атрибут LDAP, що містить назву домашнього каталогу користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: nsUniqueId"
msgid "Default: ipaUniqueID"
-msgstr "Типове значення: ipaUniqueID"
+msgstr "Типове значення: nsUniqueId"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
+#, fuzzy
+#| msgid "ldap_user_ssh_public_key (string)"
msgid "ipa_host_ssh_public_key (string)"
-msgstr "ipa_host_ssh_public_key (рядок)"
+msgstr "ldap_user_ssh_public_key (рядок)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
+#, fuzzy
+#| msgid "The LDAP attribute that contains the user's SSH public keys."
msgid "The LDAP attribute that contains the host's SSH public keys."
-msgstr "Атрибут LDAP, який містить відкриті ключі SSH вузла."
+msgstr "Атрибут LDAP, який містить відкриті ключі SSH користувача."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:576
+#, fuzzy
+#| msgid "Default: false"
msgid "Default: ipaSshPubKey"
-msgstr "Типове значення: ipaSshPubKey"
+msgstr "Типове значення: false"
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:585
@@ -7196,15 +7364,20 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:57
+#, fuzzy
+#| msgid ""
+#| "However, it is neither necessary nor recommended to set these options. "
+#| "The AD provider can also be used as an access, chpass and sudo provider. "
+#| "No configuration of the access provider is required on the client side."
msgid ""
"However, it is neither necessary nor recommended to set these options. The "
"AD provider can also be used as an access and chpass provider. No "
"configuration of the access provider is required on the client side."
msgstr ""
-"Потреби у встановленні або використанні цих параметрів виникнути не повинно "
+"Потреби у встановленні або використанні цих параметрів виникнути не повинно. "
"Інструментом надання даних AD також можна скористатися для перевірки прав "
-"доступу та зміни паролів. У налаштовуванні керування доступом на боці "
-"клієнта немає потреби."
+"доступу, зміни паролів та доступу до sudo. У налаштовуванні керування "
+"доступом на боці клієнта немає потреби."
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:69
@@ -7224,10 +7397,10 @@ msgstr ""
#| "objectSID parameter in Active Directory. For details on this, see the "
#| "<quote>ID MAPPING</quote> section below. If you want to disable ID "
#| "mapping and instead rely on POSIX attributes defined in Active Directory, "
-#| "you should set <placeholder type=\"programlisting\" id=\"0\"/> Users, "
-#| "groups and other entities served by SSSD are always treated as case-"
-#| "insensitive in the AD provider for compatibility with Active Directory's "
-#| "LDAP implementation."
+#| "you should set <placeholder type=\"programlisting\" id=\"0\"/> In order "
+#| "to retrieve users and groups using POSIX attributes from trusted domains, "
+#| "the AD administrator must make sure that the POSIX attributes are "
+#| "replicated to the Global Catalog."
msgid ""
"By default, the AD provider will map UID and GID values from the objectSID "
"parameter in Active Directory. For details on this, see the <quote>ID "
@@ -7235,15 +7408,15 @@ msgid ""
"rely on POSIX attributes defined in Active Directory, you should set "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
-"Типово засіб надання даних AD виконує прив’язку значень UID і GID з "
-"параметра objectSID у Active Directory. Докладніше про це можна дізнатися з "
-"розділу «ВСТАНОВЛЕННЯ ВІДПОВІДНОСТІ ІДЕНТИФІКАТОРІВ», наведеного нижче. Якщо "
-"ви хочете вимкнути прив’язку ідентифікаторів і замість цього використати "
+"Типово, модуль надання даних AD виконуватиме прив’язку до значень UID та GID "
+"з параметра objectSID у Active Directory. Докладніший опис наведено у "
+"розділі «ВСТАНОВЛЕННЯ ВІДПОВІДНОСТІ ІДЕНТИФІКАТОРІВ». Якщо вам потрібно "
+"вимкнути встановлення відповідності ідентифікаторів і покладатися на "
"атрибути POSIX, визначені у Active Directory, вам слід встановити "
-"<placeholder type=\"programlisting\" id=\"0\"/> Записи користувачів, груп та "
-"інші записи, що обслуговуються SSSD, завжди оброблятимуться у засобі надання "
-"даних AD з врахуванням регістру для сумісності з реалізацією Active "
-"Directory у LDAP."
+"<placeholder type=\"programlisting\" id=\"0\"/> Щоб отримати дані щодо "
+"користувачів і груп за допомогою атрибутів POSIX з надійних доменів, "
+"адміністратор AD має переконатися, що атрибути POSIX відтворюються у "
+"загальному каталозі (Global Catalog)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:83
@@ -7325,15 +7498,12 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:193
-#, fuzzy, no-wrap
-#| msgid ""
-#| "override_homedir = /home/%u\n"
-#| " "
+#, no-wrap
msgid ""
"fallback_homedir = /home/%u\n"
" "
msgstr ""
-"override_homedir = /home/%u\n"
+"fallback_homedir = /home/%u\n"
" "
#. type: Content of: <reference><refentry><refsect1><para>
@@ -7515,14 +7685,19 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:92
+#, fuzzy
+#| msgid ""
+#| "When the SSSD is configured to use IPA as the ID provider, the sudo "
+#| "provider is automatically enabled. The sudo search base is configured to "
+#| "use the compat tree (ou=sudoers,$DC)."
msgid ""
"When the SSSD is configured to use the IPA provider, the sudo provider is "
"automatically enabled. The sudo search base is configured to use the compat "
"tree (ou=sudoers,$DC)."
msgstr ""
-"Якщо SSSD налаштовано на використання надавача даних IPA, автоматично "
-"вмикається модуль надавача даних sudo. Базу пошуку sudo налаштовано на "
-"використання ієрархії даних compat (ou=sudoers,$DC)."
+"Якщо SSSD налаштовано на використання надавача даних IPA для ідентифікатора, "
+"автоматично вмикається модуль надавача даних sudo. Базу пошуку sudo "
+"налаштовано на використання ієрархії даних compat (ou=sudoers,$DC)."
#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-sudo.5.xml:99
@@ -7873,16 +8048,12 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:193
-#, fuzzy
-#| msgid ""
-#| "If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
-#| "debug messages will be sent to stderr."
msgid ""
"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
"applications will not use the fast in memory cache."
msgstr ""
-"Якщо встановлено будь-яке значення змінної середовища "
-"SSSD_KRB5_LOCATOR_DEBUG, діагностичні повідомлення надсилатимуться до stderr."
+"Якщо для змінної середовища SSS_NSS_USE_MEMCACHE встановлено значення «NO», "
+"клієнтські програми не використовуватимуть fast у кеші у пам’яті."
#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
@@ -8351,14 +8522,6 @@ msgid ""
"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
"</citerefentry> for details) is created."
msgstr ""
-"Каталог для зберігання кешу реєстраційних даних. Тут можна використовувати "
-"всі послідовності-замінники krb5_ccname_template, окрім %d і %P. Якщо "
-"каталогу не існує, його буде створено. Якщо використано %u, %U, %p або %h, "
-"буде створено особистий каталог, власником якого буде користувач. Якщо цих "
-"замінників не буде використано, буде створено відкритий каталог з обмеженням "
-"на вилучення (або липким бітом, докладніші відомості викладено у довіднику "
-"(man) з <citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</"
-"manvolnum> </citerefentry>)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:152
@@ -8407,8 +8570,10 @@ msgstr "домашній каталог"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:192
+#, fuzzy
+#| msgid "value of krb5_ccachedir"
msgid "value of krb5ccache_dir"
-msgstr "значення krb5ccache_dir"
+msgstr "значення krb5_ccachedir"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:197
@@ -8422,6 +8587,16 @@ msgstr "ідентифікатор процесу клієнтської час
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:161
+#, fuzzy
+#| msgid ""
+#| "Location of the user's credential cache. Three credential cache types are "
+#| "currently supported: <quote>FILE</quote>, <quote>DIR</quote> and "
+#| "<quote>KEYRING:persistent</quote>. The cache can be specified either as "
+#| "<replaceable>TYPE:RESIDUAL</replaceable>, or as an absolute path, which "
+#| "implies the <quote>FILE</quote> type. In the template, the following "
+#| "sequences are substituted: <placeholder type=\"variablelist\" id=\"0\"/> "
+#| "If the template ends with 'XXXXXX' mkstemp(3) is used to create a unique "
+#| "filename in a safe way."
msgid ""
"Location of the user's credential cache. Two credential cache types are "
"currently supported: <quote>FILE</quote> and <quote>DIR</quote>. The cache "
@@ -8431,19 +8606,20 @@ msgid ""
"\"variablelist\" id=\"0\"/> If the template ends with 'XXXXXX' mkstemp(3) is "
"used to create a unique filename in a safe way."
msgstr ""
-"Розташування кешу з реєстраційними даними користувача. У поточній версії "
-"передбачено підтримку двох типів кешу реєстраційних даних: <quote>FILE</"
-"quote> та <quote>DIR</quote>. Теш може бути вказано або у форматі "
-"<replaceable>ТИП:РЕШТА</replaceable>, або у форматі абсолютного шляху (тоді "
-"вважається, що типом кешу є <quote>FILE</quote>). У шаблоні передбачено "
-"можливість використання таких послідовностей-замінників: <placeholder type="
-"\"variablelist\" id=\"0\"/> Якщо шаблон завершується послідовністю «XXXXXX», "
-"для безпечного створення назви файла використовується mkstemp(3)."
+"Розташування кешу з реєстраційними даними користувача У поточній версії "
+"передбачено підтримку трьох типів кешу реєстраційних даних: <quote>FILE</"
+"quote>, <quote>DIR</quote> та <quote>KEYRING:persistent</quote>. Кеш може "
+"бути вказано або у форматі <replaceable>ТИП:РЕШТА</replaceable>, або у "
+"форматі абсолютного шляху (тоді вважається, що типом кешу є <quote>FILE</"
+"quote>). У шаблоні передбачено можливість використання таких послідовностей-"
+"замінників: <placeholder type=\"variablelist\" id=\"0\"/> Якщо шаблон "
+"завершується послідовністю «XXXXXX», для безпечного створення назви файла "
+"використовується mkstemp(3)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:212
msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
-msgstr "Типове значення: FILE:%d/krb5cc_%U_XXXXXX"
+msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:218
@@ -10167,9 +10343,6 @@ msgid ""
"default value as well as the lowest allowed value, 0xFFF0 is the most "
"verbose mode. This setting overrides the settings from config file."
msgstr ""
-"Бітова маска, яка визначає рівні діагностики, дані яких буде показано. "
-"0x0010 — типове і найменше можливе значення. 0xFFF0 — найдокладніший режим. "
-"Визначення цього параметра має пріоритет над визначенням у файлі налаштувань."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:8
@@ -10178,88 +10351,140 @@ msgstr "Рівні діагностики, передбачені у поточ
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:11
+#, fuzzy
+#| msgid ""
+#| "<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: Fatal failures. "
+#| "Anything that would prevent SSSD from starting up or causes it to cease "
+#| "running."
msgid ""
"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
"SSSD from starting up or causes it to cease running."
msgstr ""
-"<emphasis>0x0010</emphasis>: критичні помилки з аварійним завершенням "
-"роботи. Всі помилки, які не дають SSSD змоги розпочати або продовжувати "
-"роботу."
+"<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: критичні помилки з "
+"аварійним завершенням роботи. Всі помилки, які не дають SSSD змоги розпочати "
+"або продовжувати роботу."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:15
+#, fuzzy
+#| msgid ""
+#| "<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: Critical failures. "
+#| "An error that doesn't kill the SSSD, but one that indicates that at least "
+#| "one major feature is not going to work properly."
msgid ""
"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
"the SSSD, but one that indicates that at least one major feature is not "
"going to work properly."
msgstr ""
-"<emphasis>0x0020</emphasis>: критичні помилки. Помилки, які не призводять до "
-"аварійного завершення роботи SSSD, але означають, що одна з основних "
-"можливостей не працює належним чином."
+"<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: критичні помилки. "
+"Помилки, які не призводять до аварійного завершення роботи SSSD, але "
+"означають, що одна з основних можливостей не працює належним чином."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:20
+#, fuzzy
+#| msgid ""
+#| "<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: Serious failures. An "
+#| "error announcing that a particular request or operation has failed."
msgid ""
"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
"particular request or operation has failed."
msgstr ""
-"<emphasis>0x0040</emphasis>: серйозні помилки. Повідомлення про такі помилки "
-"означають, що не вдалося виконати певний запит або дію."
+"<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: серйозні помилки. "
+"Повідомлення про такі помилки означають, що не вдалося виконати певний запит "
+"або дію."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:24
+#, fuzzy
+#| msgid ""
+#| "<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: Minor failures. "
+#| "These are the errors that would percolate down to cause the operation "
+#| "failure of 2."
msgid ""
"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
"percolate down to cause the operation failure of 2."
msgstr ""
-"<emphasis>0x0080</emphasis>: незначні помилки. Це помилки які можуть "
-"призвести до помилок під час виконання дій."
+"<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: незначні помилки. Це "
+"помилки які можуть призвести до помилок під час виконання дій."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:28
+#, fuzzy
+#| msgid ""
+#| "<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: Configuration "
+#| "settings."
msgid "<emphasis>0x0100</emphasis>: Configuration settings."
-msgstr "<emphasis>0x0100</emphasis>: параметри налаштування."
+msgstr ""
+"<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: параметри налаштування."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
+#, fuzzy
+#| msgid "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: Function data."
msgid "<emphasis>0x0200</emphasis>: Function data."
-msgstr "<emphasis>0x0200</emphasis>: дані функцій."
+msgstr "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: дані функцій."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:34
+#, fuzzy
+#| msgid ""
+#| "<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: Trace messages for "
+#| "operation functions."
msgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
-msgstr "<emphasis>0x0400</emphasis>: повідомлення трасування для функцій дій."
+msgstr ""
+"<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: повідомлення трасування "
+"для функцій дій."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:37
+#, fuzzy
+#| msgid ""
+#| "<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: Trace messages for "
+#| "internal control functions."
msgid ""
"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
msgstr ""
-"<emphasis>0x1000</emphasis>: повідомлення трасування для функцій "
-"внутрішнього трасування."
+"<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: повідомлення трасування "
+"для функцій внутрішнього трасування."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
+#, fuzzy
+#| msgid ""
+#| "<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: Contents of function-"
+#| "internal variables that may be interesting."
msgid ""
"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
"may be interesting."
msgstr ""
-"<emphasis>0x2000</emphasis>: вміст внутрішніх змінних функцій, який може "
-"бути цікавим."
+"<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: вміст внутрішніх "
+"змінних функцій, який може бути цікавим."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:43
+#, fuzzy
+#| msgid ""
+#| "<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: Extremely low-level "
+#| "tracing information."
msgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
-msgstr "<emphasis>0x4000</emphasis>: дані трасування найнижчого рівня."
+msgstr ""
+"<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: дані трасування "
+"найнижчого рівня."
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:46
+#, fuzzy
+#| msgid ""
+#| "To log required bitmask debug levels, simply add their numbers together "
+#| "as shown in following examples:"
msgid ""
"To log required debug levels, simply add their numbers together as shown in "
"following examples:"
msgstr ""
-"Щоб до журналу було записано дані потрібних рівнів діагностики, просто "
-"додайте відповідні числа, як це показано у наведених нижче прикладах:"
+"Щоб до журналу було записано дані потрібних бітових масок рівнів "
+"діагностики, просто додайте відповідні числа, як це показано у наведених "
+"нижче прикладах:"
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:49
@@ -10284,14 +10509,16 @@ msgstr ""
#. type: Content of: <listitem><para>
#: include/debug_levels.xml:57
+#, fuzzy
+#| msgid ""
+#| "<emphasis>Note</emphasis>: The bitmask format of debug levels was "
+#| "introduced in 1.7.0."
msgid ""
"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
msgstr ""
-"<emphasis>Зауваження</emphasis>: цей новий формат визначення рівнів "
-"діагностики впроваджено у версії 1.7.0. Визначення у форматах попередніх "
-"версій (числа від 0 до 10) сумісні сз поточною версією, але вважаються "
-"застарілими."
+"<emphasis>Зауваження</emphasis>: формат бітових масок для рівнів діагностики "
+"впроваджено у версії 1.7.0."
#. type: Content of: outside any tag (error?)
#: include/experimental.xml:1
@@ -10381,6 +10608,8 @@ msgstr "ТАКОЖ ПЕРЕГЛЯНЬТЕ"
#| "<citerefentry> <refentrytitle>sss_ssh_authorizedkeys</refentrytitle> "
#| "<manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
#| "<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+#| "manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+#| "<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
#| "manvolnum> </citerefentry>, </phrase> <citerefentry> "
#| "<refentrytitle>pam_sss</refentrytitle><manvolnum>8</manvolnum> </"
#| "citerefentry>."
@@ -10456,6 +10685,8 @@ msgstr ""
"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
"manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
+"manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
+"<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
@@ -10485,12 +10716,15 @@ msgstr "синтаксис: <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:13
#: include/ldap_search_bases_experimental.xml:13
+#, fuzzy
+#| msgid ""
+#| "The filter must be a valid LDAP search filter as specified by http://www."
+#| "ietf.org/rfc/rfc2254.txt"
msgid ""
"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
"rfc2254.txt"
msgstr ""
-"Областю може бути одне зі значень: «base», «onelevel» або «subtree». "
"Фільтром має бути коректний запис фільтрування LDAP, відповідно до "
"специфікації http://www.ietf.org/rfc/rfc2254.txt"
@@ -10529,6 +10763,21 @@ msgstr ""
"autofs зміни, типово слід перезапустити фонову службу автоматичного "
"монтування після перезапуску SSSD."
+#~ msgid "GENERAL OPTIONS"
+#~ msgstr "ЗАГАЛЬНІ ПАРАМЕТРИ"
+
+#~ msgid ""
+#~ "Following options are usable in more than one configuration sections."
+#~ msgstr ""
+#~ "Нижче наведено параметри, які можна використовувати у декількох розділах "
+#~ "налаштувань."
+
+#~ msgid "Options usable in all sections"
+#~ msgstr "Параметри, які можна використовувати у всіх розділах"
+
+#~ msgid "Options usable in SERVICE and DOMAIN sections"
+#~ msgstr "Параметри які можна використовувати у розділах SERVICE та DOMAIN"
+
#~ msgid "%1$s"
#~ msgstr "%1$s"
@@ -10558,6 +10807,143 @@ msgstr ""
#~ "Передбачено використання таких замінників: <placeholder type="
#~ "\"variablelist\" id=\"0\"/>"
+#~ msgid "offline_timeout (integer)"
+#~ msgstr "offline_timeout (ціле число)"
+
+#~ msgid ""
+#~ "If SSSD is in offline mode, and last attempt to go online was less than "
+#~ "number of seconds specified in this option ago, new requests for data "
+#~ "will not result in attempt to go online."
+#~ msgstr ""
+#~ "Якщо SSSD працює у автономному режимі і остання спроба встановити зв’язок "
+#~ "з мережею виконувалася менше ніж за вказану кількість секунд тому, нові "
+#~ "запити щодо отримання даних не призводитимуть до спроб встановити "
+#~ "з’єднання з мережею."
+
+#~ msgid ""
+#~ "The default shell to use if the provider does not return one during "
+#~ "lookup. This option can be specified globally in the [nss] section or per-"
+#~ "domain."
+#~ msgstr ""
+#~ "Типова командна оболонка, яку буде використано, якщо засобом надання "
+#~ "даних не було повернуто назви оболонки під час пошуку. Цей параметр можна "
+#~ "вказати або на загальному рівні у розділі [nss], або окремо для кожного з "
+#~ "доменів."
+
+#~ msgid ""
+#~ "These options can be used to configure the sudo service. The detailed "
+#~ "instructions for configuration of <citerefentry> <refentrytitle>sudo</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to work with "
+#~ "<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> are in the manual page <citerefentry> "
+#~ "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry>."
+#~ msgstr ""
+#~ "Цими параметрами можна скористатися для налаштовування служби sudo. "
+#~ "Докладні настанови щодо налаштовування <citerefentry> "
+#~ "<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </"
+#~ "citerefentry> на роботу з <citerefentry> <refentrytitle>sssd</"
+#~ "refentrytitle> <manvolnum>8</manvolnum> </citerefentry> можна знайти на "
+#~ "сторінці довідника <citerefentry> <refentrytitle>sssd-sudo</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid "subdomain_enumerate (string)"
+#~ msgstr "subdomain_enumerate (рядок)"
+
+#~ msgid "all"
+#~ msgstr "all"
+
+#~ msgid "All discovered trusted domains will be enumerated"
+#~ msgstr "Усі виявлені надійні домени буде пронумеровано"
+
+#~ msgid "none"
+#~ msgstr "none"
+
+#~ msgid "No discovered trusted domains will be enumerated"
+#~ msgstr "Нумерація виявлених надійних доменів не виконуватиметься"
+
+#~ msgid ""
+#~ "Whether any of autodetected trusted domains should be enumerated. The "
+#~ "supported values are: <placeholder type=\"variablelist\" id=\"0\"/> "
+#~ "Optionally, a list of one or more domain names can enable enumeration "
+#~ "just for these trusted domains."
+#~ msgstr ""
+#~ "Визначає, чи слід нумерувати усі автоматично виявлені надійні (довірені) "
+#~ "домени. Підтримувані значення: <placeholder type=\"variablelist\" id="
+#~ "\"0\"/> Якщо потрібно, можна вказати список з однієї або декількох назв "
+#~ "надійних доменів, для яких буде увімкнено нумерацію."
+
+#~ msgid ""
+#~ "The cache expiration timestamps are stored as attributes of individual "
+#~ "objects in the cache. Therefore, changing the cache timeout only has "
+#~ "effect for newly added or expired entries. You should run the "
+#~ "<citerefentry> <refentrytitle>sss_cache</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> tool in order to force refresh of entries that "
+#~ "have already been cached."
+#~ msgstr ""
+#~ "Дані щодо часових позначок завершення строку дії записів кешу "
+#~ "зберігаються як атрибути окремих об’єктів у кеші. Тому зміна часу "
+#~ "очікування на дані у кеші впливає лише на нові записи та записи, строк "
+#~ "дії яких вичерпано. Для примусового оновлення записів, які вже було "
+#~ "кешовано, вам слід запустити програму <citerefentry> "
+#~ "<refentrytitle>sss_cache</refentrytitle> <manvolnum>8</manvolnum> </"
+#~ "citerefentry>."
+
+#~ msgid ""
+#~ "Specifies how many seconds SSSD has to wait before triggering a "
+#~ "background refresh task which will refresh all expired or nearly expired "
+#~ "records."
+#~ msgstr ""
+#~ "Визначає кількість секунд, протягом яких SSSD має очікувати до запуску "
+#~ "завдання з оновлення у фоновому режимі записів кешу, строк дії яких "
+#~ "вичерпано або майже вичерпано."
+
+#~ msgid "Currently only refreshing expired netgroups is supported."
+#~ msgstr ""
+#~ "У поточній версії передбачено оновлення лише застарілих записів мережевих "
+#~ "груп."
+
+#~ msgid ""
+#~ "NOTE: This option has no effect on netgroup lookups due to their tendency "
+#~ "to include nested netgroups without qualified names. For netgroups, all "
+#~ "domains will be searched when an unqualified name is requested."
+#~ msgstr ""
+#~ "ЗАУВАЖЕННЯ: цей параметр не впливатиме на пошук у мережевих групах через "
+#~ "тенденцію до включення до таких груп вкладених мережевих груп. Для "
+#~ "мережевих груп, якщо задано неповну назву, буде виконано пошук у всіх "
+#~ "доменах."
+
+#~ msgid ""
+#~ "<quote>ipa</quote> the same as <quote>ldap</quote> but with IPA default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ipa</quote> — те саме, що і <quote>ldap</quote>, але з типовими "
+#~ "параметрами IPA."
+
+#~ msgid ""
+#~ "<quote>ad</quote> the same as <quote>ldap</quote> but with AD default "
+#~ "settings."
+#~ msgstr ""
+#~ "<quote>ad</quote> — те саме, що і <quote>ldap</quote>, але з типовими "
+#~ "параметрами AD."
+
+#~ msgid ""
+#~ "The detailed instructions for configuration of sudo_provider are in the "
+#~ "manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>. There are many configuration "
+#~ "options that can be used to adjust the behavior. Please refer to "
+#~ "\"ldap_sudo_*\" in <citerefentry> <refentrytitle>sssd-ldap</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+#~ msgstr ""
+#~ "З докладними настановами щодо налаштовування sudo_provider можна "
+#~ "ознайомитися за допомогою сторінки підручника (man) <citerefentry> "
+#~ "<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry>. Передбачено доволі багато параметрів налаштовування, якими "
+#~ "можна скористатися для коригування поведінки програми. Докладніший опис "
+#~ "можна знайти у розділах щодо «ldap_sudo_*»\" у підручнику з "
+#~ "<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry>."
+
#~ msgid ""
#~ "Regular expression for this domain that describes how to parse the string "
#~ "containing user name and domain into these components. The \"domain\" "
@@ -10585,6 +10971,59 @@ msgstr ""
#~ "Різноманітні теґи, що зберігаються службою налаштовування realmd для "
#~ "цього домену."
+#~ msgid "SSSD LDAP provider"
+#~ msgstr "Модуль надання даних LDAP SSSD"
+
+#~ msgid "ldap_user_extra_attrs (string)"
+#~ msgstr "ldap_user_extra_attrs (рядок)"
+
+#~ msgid ""
+#~ "Comma-separated list of LDAP attributes that SSSD would fetch along with "
+#~ "the usual set of user attributes."
+#~ msgstr ""
+#~ "Відокремлений комами список атрибутів LDAP, які SSSD має отримувати разом "
+#~ "зі звичайним набором атрибутів запису користувача."
+
+#~ msgid ""
+#~ "The list can either contain LDAP attribute names only, or colon-separated "
+#~ "tuples of SSSD cache attribute name and LDAP attribute name. In case only "
+#~ "LDAP attribute name is specified, the attribute is saved to the cache "
+#~ "verbatim. Using a custom SSSD attribute name might be required by "
+#~ "environments that configure several SSSD domains with different LDAP "
+#~ "schemas."
+#~ msgstr ""
+#~ "Список може або містити лише назви атрибутів LDAP, або відокремлені "
+#~ "двокрапками кортежі з назви атрибута кешу SSSD та назви атрибута LDAP. "
+#~ "Якщо вказано лише назву атрибута LDAP, атрибут зберігається до кешу "
+#~ "буквально. Використання нетипової назви атрибута SSSD може бути потрібним "
+#~ "середовищам, де налаштовано декілька доменів SSSD з різними схемами LDAP."
+
+#~ msgid ""
+#~ "Please note that several attribute names are reserved by SSSD, notably "
+#~ "the <quote>name</quote> attribute. SSSD would report an error if any of "
+#~ "the reserved attribute names is used as an extra attribute name."
+#~ msgstr ""
+#~ "Будь ласка, зауважте, що декілька назв атрибутів зарезервовано SSSD, "
+#~ "зокрема атрибут «name». SSSD повідомить про помилку, якщо будь-які із "
+#~ "зарезервованих назв атрибутів використано як назву додаткового атрибута."
+
+#~ msgid "ldap_user_extra_attrs = telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>telephoneNumber</quote> to the cache."
+#~ msgstr ""
+#~ "Зберегти атрибут «telephoneNumber» з LDAP як «telephoneNumber» до кешу."
+
+#~ msgid "ldap_user_extra_attrs = phone:telephoneNumber"
+#~ msgstr "ldap_user_extra_attrs = phone:telephoneNumber"
+
+#~ msgid ""
+#~ "Save the <quote>telephoneNumber</quote> attribute from LDAP as "
+#~ "<quote>phone</quote> to the cache."
+#~ msgstr "Зберегти атрибут «telephoneNumber» з LDAP як «phone» до кешу."
+
#~ msgid ""
#~ "Please note that the ldap_access_order configuration option "
#~ "<emphasis>must</emphasis> include <quote>authorized_service</quote> in "
@@ -10603,6 +11042,69 @@ msgstr ""
#~ "<emphasis>має</emphasis> включати <quote>host</quote>, щоб можна було "
#~ "скористатися параметром ldap_user_authorized_host."
+#~ msgid "ldap_group_type (integer)"
+#~ msgstr "ldap_group_type (ціле число)"
+
+#~ msgid ""
+#~ "The LDAP attribute that contains an integer value indicating the type of "
+#~ "the group and maybe other flags."
+#~ msgstr ""
+#~ "Атрибут LDAP, що містить ціле значення і позначає тип групи, а також, "
+#~ "можливо, інші прапорці."
+
+#~ msgid ""
+#~ "This attribute is currently only used by the AD provider to determine if "
+#~ "a group is a domain local groups and has to be filtered out for trusted "
+#~ "domains."
+#~ msgstr ""
+#~ "Цей атрибут у поточній версії використовується лише засобом надання даних "
+#~ "AD для визначення, чи є група локальною групою домену і чи має бути її "
+#~ "відфільтровано у списку надійних (довірених) доменів."
+
+#~ msgid "Default: groupType in the AD provider, othewise not set"
+#~ msgstr ""
+#~ "Типове значення: groupType у засобі надання даних AD, у інших засобах не "
+#~ "встановлено"
+
+#~ msgid ""
+#~ "Note: This option specifies the guaranteed level of nested groups to be "
+#~ "processed for any lookup. However, nested groups beyond this limit "
+#~ "<emphasis>may be</emphasis> returned if previous lookups already resolved "
+#~ "the deeper nesting levels. Also, subsequent lookups for other groups may "
+#~ "enlarge the result set for original lookup if re-queried."
+#~ msgstr ""
+#~ "Зауваження: за допомогою цього параметра визначається гарантований рівень "
+#~ "вкладеності груп для обробки під час будь-якого пошуку. Втім, "
+#~ "<emphasis>може бути</emphasis> повернуто і групи із більшим рівнем "
+#~ "вкладеності, якщо під час попередніх пошуків відбувалася обробка вищих "
+#~ "рівнів вкладеності. Крім того, послідовні пошуки інших груп можуть "
+#~ "розширити набір результатів початкового пошуку, якщо запити щодо пошуку "
+#~ "надходять повторно."
+
+#~ msgid ""
+#~ "If ldap_group_nesting_level is set to 0 then no nested groups are "
+#~ "processed at all. However, when connected to Active-Directory Server 2008 "
+#~ "and later it is furthermore required to disable usage of Token-Groups by "
+#~ "setting ldap_use_tokengroups to false."
+#~ msgstr ""
+#~ "Якщо значенням ldap_group_nesting_level є 0, вкладені групи взагалі не "
+#~ "оброблятимуться. Втім, якщо з’єднання встановлено з Active-Directory "
+#~ "Server 2008 та новішими версіями, слід також вимкнути використання груп "
+#~ "реєстраційних записів (Token-Groups) встановленням для параметра "
+#~ "ldap_use_tokengroups значення false."
+
+#~ msgid "ldap_use_tokengroups"
+#~ msgstr "ldap_use_tokengroups"
+
+#~ msgid ""
+#~ "This options enables or disables use of Token-Groups attribute when "
+#~ "performing initgroup for users from Active Directory Server 2008 and "
+#~ "later."
+#~ msgstr ""
+#~ "За допомогою цього параметра можна увімкнути або вимкнути використання "
+#~ "атрибута Token-Groups під час виконання initgroup для користувачів Active "
+#~ "Directory Server 2008 та новіших версій."
+
#~ msgid "ldap_min_id, ldap_max_id (interger)"
#~ msgstr "ldap_min_id, ldap_max_id (ціле число)"
@@ -10656,6 +11158,14 @@ msgstr ""
#~ "manvolnum> </citerefentry>, щоб дізнатися більше про додаток пошуку."
#~ msgid ""
+#~ "<emphasis>Note</emphasis>: if a password policy is configured on server "
+#~ "side, it always takes precedence over policy set with this option."
+#~ msgstr ""
+#~ "<emphasis>Зауваження</emphasis>: якщо правила поводження з паролями "
+#~ "налаштовано на боці сервера, ці правила мають пріоритет над правилами, "
+#~ "встановленими за допомогою цього параметра."
+
+#~ msgid ""
#~ "Please note that the ldap_access_order configuration option "
#~ "<emphasis>must</emphasis> include <quote>expire</quote> in order for the "
#~ "ldap_account_expire_policy option to work."
@@ -10665,6 +11175,69 @@ msgstr ""
#~ "користуватися параметром ldap_account_expire_policy."
#~ msgid ""
+#~ "The detailed instructions for configuration of sudo_provider are in the "
+#~ "manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>."
+#~ msgstr ""
+#~ "Докладні настанов щодо налаштовування sudo_provider можна знайти на "
+#~ "сторінці довідника (man) <citerefentry> <refentrytitle>sssd-sudo</"
+#~ "refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid "ldap_autofs_map_master_name (string)"
+#~ msgstr "ldap_autofs_map_master_name (рядок)"
+
+#~ msgid "The name of the automount master map in LDAP."
+#~ msgstr "Назва основної карти автоматичного монтування у LDAP."
+
+#~ msgid "Default: auto.master"
+#~ msgstr "Типове значення: auto.master"
+
+#~ msgid "<option>ignore_unknown_user</option>"
+#~ msgstr "<option>ignore_unknown_user</option>"
+
+#~ msgid ""
+#~ "If this option is specified and the user does not exist, the PAM module "
+#~ "will return PAM_IGNORE. This causes the PAM framework to ignore this "
+#~ "module."
+#~ msgstr ""
+#~ "Якщо вказано цей параметр і облікового запису не існує, модуль PAM "
+#~ "поверне PAM_IGNORE. Це призводить до ігнорування цього модуля оболонкою "
+#~ "PAM."
+
+#~ msgid "<option>ignore_authinfo_unavail</option>"
+#~ msgstr "<option>ignore_authinfo_unavail</option>"
+
+#~ msgid ""
+#~ "Specifies that the PAM module should return PAM_IGNORE if it cannot "
+#~ "contact the SSSD daemon. This causes the PAM framework to ignore this "
+#~ "module."
+#~ msgstr ""
+#~ "Визначає, що модуль PAM має повертати PAM_IGNORE, якщо не вдається "
+#~ "встановити зв’язок із фоновою службою SSSD. У результаті набір "
+#~ "інструментів PAM ігнорує цей модуль."
+
+#~ msgid "Kerberos locator plugin"
+#~ msgstr "Додаток локатора Kerberos"
+
+#~ msgid ""
+#~ "The complete group membership hierarchy is resolved before the access "
+#~ "check, thus even nested groups can be included in the access lists. "
+#~ "Please be aware that the <quote>ldap_group_nesting_level</quote> option "
+#~ "may impact the results and should be set to a sufficient value. "
+#~ "(<citerefentry> <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</"
+#~ "manvolnum> </citerefentry>) option."
+#~ msgstr ""
+#~ "Повна обробка ієрархії участі у групах виконується до перевірки прав "
+#~ "доступу, отже, до списку груп доступу може бути включено навіть вкладені "
+#~ "групи. Будь ласка, зауважте, що на результати може вплинути значення "
+#~ "параметра «ldap_group_nesting_level». Вам слід встановити для нього "
+#~ "достатнє значення. Див. <citerefentry> <refentrytitle>sssd-ldap</"
+#~ "refentrytitle><manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid "SSSD IPA provider"
+#~ msgstr "Модуль надання даних IPA SSSD"
+
+#~ msgid ""
#~ "Optional. This option tells SSSD to automatically update the DNS server "
#~ "built into FreeIPA v2 with the IP address of this client. The update is "
#~ "secured using GSS-TSIG. The IP address of the IPA LDAP connection is used "
@@ -10720,9 +11293,6 @@ msgstr ""
#~ "<emphasis>ipa_dyndns_iface</emphasis>, користувачам слід переходити на "
#~ "нову назву, <emphasis>dyndns_iface</emphasis>, у файлі налаштувань."
-#~ msgid "ipa_enable_dns_sites (boolean)"
-#~ msgstr "ipa_enable_dns_sites (булеве значення)"
-
#~ msgid "Enables DNS sites - location based service discovery."
#~ msgstr "Вмикає сайти DNS — визначення служб на основі адрес."
@@ -10794,6 +11364,18 @@ msgstr ""
#~ msgid "Default: False (let nsupdate choose the protocol)"
#~ msgstr "Типове значення: False (надати змогу nsupdate вибирати протокол)"
+#~ msgid "<emphasis>never</emphasis> use FAST."
+#~ msgstr "<emphasis>never</emphasis> — (ніколи) не використовувати FAST."
+
+#~ msgid ""
+#~ "<emphasis>try</emphasis> to use FAST. If the server does not support "
+#~ "FAST, continue the authentication without it. This is equivalent to not "
+#~ "setting this option at all."
+#~ msgstr ""
+#~ "<emphasis>try</emphasis> — (спробувати) використати FAST. Якщо на сервері "
+#~ "не передбачено підтримки FAST, продовжити спробу розпізнавання без FAST. "
+#~ "Це еквівалентно невстановленню значення цього параметра взагалі."
+
#~ msgid "ipa_hbac_selinux (integer)"
#~ msgstr "ipa_hbac_selinux (ціле число)"
@@ -10810,7 +11392,7 @@ msgstr ""
#~ msgid "ipa_server_mode (boolean)"
#~ msgstr "ipa_server_mode (булеве значення)"
-#~ msgid "This options should only be set by the IPA installer."
+#~ msgid "This option should only be set by the IPA installer."
#~ msgstr "Цей параметр має встановлюватися лише засобом встановлення IPA."
#~ msgid ""
@@ -10821,6 +11403,28 @@ msgstr ""
#~ "IPA і має виконувати пошуки користувачів і груп з довірених доменів "
#~ "окремо."
+#~ msgid "SSSD Active Directory provider"
+#~ msgstr "Модуль надання даних Active Directory SSSD"
+
+#~ msgid ""
+#~ "The AD provider is able to provide identity information and "
+#~ "authentication for entities from trusted domains as well. Currently only "
+#~ "trusted domains in the same forest are recognized."
+#~ msgstr ""
+#~ "Модуль надання даних AD може надавати дані щодо ідентифікації та "
+#~ "розпізнавання і для записів з надійних доменів. У поточній версії "
+#~ "розпізнаються лише надійні домени з одного лісу."
+
+#~ msgid ""
+#~ "Users, groups and other entities served by SSSD are always treated as "
+#~ "case-insensitive in the AD provider for compatibility with Active "
+#~ "Directory's LDAP implementation."
+#~ msgstr ""
+#~ "Дані щодо користувачів, груп та інших записів, які обслуговуються SSSD, у "
+#~ "модулі надання даних AD завжди обробляються із врахуванням регістру "
+#~ "символів для забезпечення сумісності з реалізацією Active Directory у "
+#~ "LDAP."
+
#~ msgid ""
#~ "The short domain name (also known as the NetBIOS or the flat name) is "
#~ "autodetected by the SSSD."
@@ -10861,6 +11465,191 @@ msgstr ""
#~ "Налаштування SRV DNS, зокрема домен пошуку, використовуються також під "
#~ "час визначення сайтів."
+#~ msgid "ad_access_filter (string)"
+#~ msgstr "ad_access_filter (рядок)"
+
+#~ msgid ""
+#~ "This option specifies LDAP access control filter that the user must match "
+#~ "in order to be allowed access. Please note that the "
+#~ "<quote>access_provider</quote> option must be explicitly set to "
+#~ "<quote>ad</quote> in order for this option to have an effect."
+#~ msgstr ""
+#~ "Цей параметр визначає фільтр керування доступом LDAP, якому має "
+#~ "відповідати запис користувача для того, щоб йому було надано доступ. Будь "
+#~ "ласка, зауважте, що слід явним чином встановити для параметра "
+#~ "«access_provider» значення «ad», щоб цей параметр почав діяти."
+
+#~ msgid ""
+#~ "The option also supports specifying different filters per domain or "
+#~ "forest. This extended filter would consist of: <quote>KEYWORD:NAME:"
+#~ "FILTER</quote>. The keyword can be either <quote>DOM</quote>, "
+#~ "<quote>FOREST</quote> or missing."
+#~ msgstr ""
+#~ "У параметрі також передбачено підтримку визначення різних фільтрів для "
+#~ "окремих доменів або дерев. Цей розширений фільтр повинен мати такий "
+#~ "формат: «КЛЮЧОВЕ СЛОВО:НАЗВА:ФІЛЬТР». Набір підтримуваних ключових слів: "
+#~ "«DOM», «FOREST» або ключове слово слід пропустити."
+
+#~ msgid ""
+#~ "If the keyword equals to <quote>DOM</quote> or is missing, then "
+#~ "<quote>NAME</quote> specifies the domain or subdomain the filter applies "
+#~ "to. If the keyword equals to <quote>FOREST</quote>, then the filter "
+#~ "equals to all domains from the forest specified by <quote>NAME</quote>."
+#~ msgstr ""
+#~ "Якщо вказано ключове слово «DOM» або ключового слова не вказано, «НАЗВА» "
+#~ "визначає домен або піддомен, до якого застосовується фільтрування. Якщо "
+#~ "ключовим словом є «FOREST», фільтр застосовується до усіх доменів з лісу, "
+#~ "вказаного значенням «НАЗВА»."
+
+#~ msgid ""
+#~ "Multiple filters can be separated with the <quote>?</quote> character, "
+#~ "similarly to how search bases work."
+#~ msgstr ""
+#~ "Декілька фільтрів можна відокремити символом «?», подібно до способу "
+#~ "визначення фільтрів у базах для пошуку."
+
+#~ msgid ""
+#~ "The most specific match is always used. For example, if the option "
+#~ "specified filter for a domain the user is a member of and a global "
+#~ "filter, the per-domain filter would be applied. If there are more "
+#~ "matches with the same specification, the first one is used."
+#~ msgstr ""
+#~ "Завжди використовується відповідник з найвищим рівнем відповідності. "
+#~ "Наприклад, якщо визначено фільтрування для домену, учасником якого є "
+#~ "користувач, і загальне фільтрування, буде використано фільтрування для "
+#~ "окремого домену. Якщо буде виявлено декілька відповідників з однаковою "
+#~ "специфікацією, використовуватиметься лише перший з них."
+
+#~ msgid ""
+#~ "# apply filter on domain called dom1 only:\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on domain called dom2 only:\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# apply filter on forest called EXAMPLE.COM only:\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+#~ msgstr ""
+#~ "# застосувати фільтрування лише для домену з назвою dom1:\n"
+#~ "dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
+#~ "\n"
+#~ "# застосувати фільтрування лише для домену з назвою dom2:\n"
+#~ "DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
+#~ "\n"
+#~ "# застосувати фільтрування лише для лісу з назвою EXAMPLE.COM:\n"
+#~ "FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
+#~ " "
+
+#~ msgid "Default: Not set"
+#~ msgstr "Типове значення: не встановлено"
+
+#~ msgid "ad_enable_gc (boolean)"
+#~ msgstr "ad_enable_gc (булеве значення)"
+
+#~ msgid ""
+#~ "By default, the SSSD connects to the Global Catalog first to retrieve "
+#~ "users from trusted domains and uses the LDAP port to retrieve group "
+#~ "memberships or as a fallback. Disabling this option makes the SSSD only "
+#~ "connect to the LDAP port of the current AD server."
+#~ msgstr ""
+#~ "Типово, SSSD для отримання даних користувачів з надійних (довірених) "
+#~ "доменів спочатку встановлює з’єднання із загальним каталогом (Global "
+#~ "Catalog). Якщо ж отримати дані не вдасться, система використовує порт "
+#~ "LDAP для отримання даних щодо участі у групах. Вимикання цього параметра "
+#~ "призведе до того, що SSSD встановлюватиме зв’язок лише з портом LDAP "
+#~ "поточного сервера AD."
+
+#~ msgid ""
+#~ "Please note that disabling Global Catalog support does not disable "
+#~ "retrieving users from trusted domains. The SSSD would connect to the LDAP "
+#~ "port of trusted domains instead. However, Global Catalog must be used in "
+#~ "order to resolve cross-domain group memberships."
+#~ msgstr ""
+#~ "Будь ласка, зауважте, що вимикання підтримки загального каталогу (Global "
+#~ "Catalog) не призведе до вимикання спроб отримати дані користувачів з "
+#~ "надійних (довірених) доменів. Просто SSSD намагатиметься отримати ці ж "
+#~ "дані за допомогою порту LDAP надійних доменів. Втім, загальним каталогом "
+#~ "(Global Catalog) доведеться скористатися для визначення зв’язків даних "
+#~ "щодо участі у групах для різних доменів."
+
+#~ msgid "ad_gpo_access_control (string)"
+#~ msgstr "ad_gpo_access_control (рядок)"
+
+#~ msgid ""
+#~ "This option specifies the operation mode for GPO-based access control "
+#~ "functionality: whether it operates in disabled mode, enforcing mode, or "
+#~ "permissive mode. Please note that the <quote>access_provider</quote> "
+#~ "option must be explicitly set to <quote>ad</quote> in order for this "
+#~ "option to have an effect."
+#~ msgstr ""
+#~ "Цей параметр визначає режим роботи для функціональних можливостей "
+#~ "керування доступом на основі GPO: працюватиме система у вимкненому "
+#~ "режимі, режимі примушення чи дозвільному режимі. Будь ласка, зауважте, що "
+#~ "для того, щоб цей параметр запрацював, слід явним чином встановити для "
+#~ "параметра «access_provider» значення «ad»."
+
+#~ msgid ""
+#~ "GPO-based access control functionality uses GPO policy settings to "
+#~ "determine whether or not a particular user is allowed to logon to a "
+#~ "particular host."
+#~ msgstr ""
+#~ "Функціональні можливості з керування доступом на основі GPO "
+#~ "використовують параметри правил GPO для визначення того, може чи не може "
+#~ "той чи інший користувач увійти до системи певного вузла мережі."
+
+#~ msgid ""
+#~ "NOTE: If the operation mode is set to enforcing, it is possible that "
+#~ "users that were previously allowed logon access will now be denied logon "
+#~ "access (as dictated by the GPO policy settings). In order to facilitate a "
+#~ "smooth transition for administrators, a permissive mode is available that "
+#~ "will not enforce the access control rules, but will evaluate them and "
+#~ "will output a syslog message if access would have been denied. By "
+#~ "examining the logs, administrators can then make the necessary changes "
+#~ "before setting the mode to enforcing."
+#~ msgstr ""
+#~ "ЗАУВАЖЕННЯ: якщо встановлено режим роботи «примусовий» (enforcing), "
+#~ "можлива ситуація, коли користувачі, які раніше мали доступ до входу, "
+#~ "позбудуться такого доступу (через використання параметрів правил GPO). З "
+#~ "метою полегшити перехід на нову систему для адміністраторів передбачено "
+#~ "дозвільний режим доступу (permissive), за якого правила керування "
+#~ "доступом не встановлюватимуться у примусовому порядку. Програма лише "
+#~ "перевірятиме відповідність цим правилам і виводитиме до системного "
+#~ "журналу повідомлення, якщо доступ було надано усупереч цим правилам. "
+#~ "Вивчення журналу надасть змогу адміністраторам внести відповідні зміни до "
+#~ "встановлення примусового режиму (enforcing)."
+
+#~ msgid "There are three supported values for this option:"
+#~ msgstr "У цього параметра є три підтримуваних значення:"
+
+#~ msgid ""
+#~ "disabled: GPO-based access control rules are neither evaluated nor "
+#~ "enforced."
+#~ msgstr ""
+#~ "disabled: правила керування доступом, засновані на GPO, не обробляються і "
+#~ "не використовуються примусово."
+
+#~ msgid ""
+#~ "enforcing: GPO-based access control rules are evaluated and enforced."
+#~ msgstr ""
+#~ "enforcing: правила керування доступом, засновані на GPO, обробляються і "
+#~ "використовуються примусово."
+
+#~ msgid ""
+#~ "permissive: GPO-based access control rules are evaluated, but not "
+#~ "enforced. Instead, a syslog message will be emitted indicating that the "
+#~ "user would have been denied access if this option's value were set to "
+#~ "enforcing."
+#~ msgstr ""
+#~ "permissive: виконати перевірку відповідності правилам керування доступом "
+#~ "на основі GPO, але не наполягати на їхньому виконанні. Якщо правила не "
+#~ "виконуються, вивести до системного журналу повідомлення про те, що "
+#~ "користувачеві було б заборонено доступ, якби використовувався режим "
+#~ "enforcing."
+
+#~ msgid "Default: permissive"
+#~ msgstr "Типове значення: permissive"
+
#~ msgid ""
#~ "Optional. This option tells SSSD to automatically update the Active "
#~ "Directory DNS server with the IP address of this client. The update is "
@@ -10904,21 +11693,266 @@ msgstr ""
#~ "явно, типовим інструментом надання доступу є «permit»."
#~ msgid ""
+#~ "<emphasis>Note</emphasis>: in order to use netgroups or IPA hostgroups in "
+#~ "sudo rules, you also need to correctly set <citerefentry> "
+#~ "<refentrytitle>nisdomainname</refentrytitle> <manvolnum>1</manvolnum> </"
+#~ "citerefentry> to your NIS domain name (which equals to IPA domain name "
+#~ "when using hostgroups)."
+#~ msgstr ""
+#~ "<emphasis>Зауваження</emphasis>: щоб у правилах sudo можна було "
+#~ "використовувати мережеві групи або групи вузлів IPA, вам слід належним "
+#~ "чином налаштувати <citerefentry> <refentrytitle>nisdomainname</"
+#~ "refentrytitle> <manvolnum>1</manvolnum> </citerefentry> на назву домену "
+#~ "NIS (назва цього домену збігається з назвою домену IPA, якщо "
+#~ "використовуються групи вузлів IPA)."
+
+#~ msgid ""
+#~ "All configuration that is needed on SSSD side is to extend the list of "
+#~ "<emphasis>services</emphasis> with \"sudo\" in [sssd] section of "
+#~ "<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
+#~ "manvolnum> </citerefentry>. To speed up the LDAP lookups, you can also "
+#~ "set search base for sudo rules using <emphasis>ldap_sudo_search_base</"
+#~ "emphasis> option."
+#~ msgstr ""
+#~ "На боці SSSD достатньо розширити список <emphasis>служб</emphasis> "
+#~ "дописуванням «sudo» до розділу [sssd] <citerefentry> <refentrytitle>sssd."
+#~ "conf</refentrytitle> <manvolnum>5</manvolnum> </citerefentry>. Щоб "
+#~ "пришвидшити пошуку у LDAP, ви також можете налаштувати базу пошуку для "
+#~ "правил sudo за допомогою параметра <emphasis>ldap_sudo_search_base</"
+#~ "emphasis>."
+
+#~ msgid ""
#~ "Special files (block devices, character devices, named pipes and unix "
#~ "sockets) will not be copied."
#~ msgstr ""
#~ "Спеціальні файли (блокові пристрої, символьні пристрої, іменовані канали "
#~ "та сокети UNIX) скопійовано не буде."
-#~ msgid "Default: false (AD provide: true)"
+#~ msgid "SSSD Kerberos provider"
+#~ msgstr "Модуль надання даних Kerberos SSSD"
+
+#~ msgid ""
+#~ "Directory to store credential caches. All the substitution sequences of "
+#~ "krb5_ccname_template can be used here, too, except %d and %P. The "
+#~ "directory is created as private and owned by the user, with permissions "
+#~ "set to 0700."
+#~ msgstr ""
+#~ "Каталог для зберігання кешу реєстраційних даних. Тут також можна "
+#~ "використовувати усі замінники з krb5_ccname_template, окрім %d та %P. "
+#~ "Каталог створюється як конфіденційний, власником є користувач, права "
+#~ "доступу — 0700."
+
+#~ msgid ""
+#~ "When using KEYRING types, the only supported mechanism is <quote>KEYRING:"
+#~ "persistent:%U</quote>, which uses the Linux kernel keyring to store "
+#~ "credentials on a per-UID basis. This is also the recommended choice, as "
+#~ "it is the most secure and predictable method."
+#~ msgstr ""
+#~ "Якщо використовуються типи KEYRING, єдиним підтримуваним механізмом є "
+#~ "«KEYRING:persistent:%U», тобто використання сховища ключів ядра Linux для "
+#~ "зберігання реєстраційних даних на основі поділу за UID. Цей варіант є "
+#~ "рекомендованим, оскільки це найбезпечніший та найпередбачуваніший спосіб."
+
+#~ msgid ""
+#~ "The default value for the credential cache name is sourced from the "
+#~ "profile stored in the system wide krb5.conf configuration file in the "
+#~ "[libdefaults] section. The option name is default_ccache_name. See krb5."
+#~ "conf(5)'s PARAMETER EXPANSION paragraph for additional information on the "
+#~ "expansion format defined by krb5.conf."
+#~ msgstr ""
+#~ "Типове значення назви кешу реєстраційних даних буде запозичено з "
+#~ "загальносистемного профілю, що зберігається у файлі налаштувань krb5."
+#~ "conf, розділ [libdefaults]. Назва параметра — default_ccache_name. Див. "
+#~ "розділ щодо розгортання параметрів (PARAMETER EXPANSION) у довідці щодо "
+#~ "krb5.conf(5), щоб отримати додаткові дані щодо формату розгортання, "
+#~ "використаного у krb5.conf."
+
+#~ msgid "Default: (from libkrb5)"
+#~ msgstr "Типове значення: (з libkrb5)"
+
+#~ msgid "Default: false (AD provider: true)"
#~ msgstr "Типове значення: false (надається AD: true)"
+#~ msgid "<option>--addattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--addattr</option> <replaceable>ПАРА_АТРИБУТ-ЗНАЧЕННЯ</"
+#~ "replaceable>"
+
+#~ msgid "Add an attribute/value pair. The format is attrname=value."
+#~ msgstr "Додати пару атрибут-значення. Форматування: атрибут=значення."
+
+#~ msgid "<option>--setattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--setattr</option> <replaceable>ПАРА_АТРИБУТ-ЗНАЧЕННЯ</"
+#~ "replaceable>"
+
+#~ msgid ""
+#~ "Set an attribute to a name/value pair. The format is attrname=value. For "
+#~ "multi-valued attributes, the command replaces the values already present"
+#~ msgstr ""
+#~ "Встановити для вказаного за назвою атрибута значення. Форматування: "
+#~ "атрибут=значення. Для атрибутів з декількома значеннями команда призведе "
+#~ "до заміни поточних значень."
+
+#~ msgid "<option>--delattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
+#~ msgstr ""
+#~ "<option>--delattr</option> <replaceable>ПАРА_АТРИБУТ-ЗНАЧЕННЯ</"
+#~ "replaceable>"
+
+#~ msgid "Delete an attribute/value pair. The format is attrname=value."
+#~ msgstr "Вилучити пару атрибут-значення. Форматування: атрибут=значення."
+
#~ msgid "<option>-E</option>,<option>--everything</option>"
#~ msgstr "<option>-E</option>,<option>--everything</option>"
#~ msgid "Invalidate all cached entries except for sudo rules."
#~ msgstr "Скасувати чинність усіх кешованих записів, окрім правил sudo."
+#~ msgid "sssd-ifp"
+#~ msgstr "sssd-ifp"
+
+#~ msgid "SSSD InfoPipe responder"
+#~ msgstr "Відповідач InfoPipe SSSD"
+
+#~ msgid ""
+#~ "This manual page describes the configuration of the InfoPipe responder "
+#~ "for <citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry>. For a detailed syntax reference, refer to "
+#~ "the <quote>FILE FORMAT</quote> section of the <citerefentry> "
+#~ "<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
+#~ "citerefentry> manual page."
+#~ msgstr ""
+#~ "На цій сторінці довідника описано налаштування засобу надання відповідей "
+#~ "InfoPipe для <citerefentry> <refentrytitle>sssd</refentrytitle> "
+#~ "<manvolnum>8</manvolnum> </citerefentry>. Щоб дізнатися більше про "
+#~ "синтаксис налаштування, зверніться до розділу «ФОРМАТ ФАЙЛІВ» сторінки "
+#~ "довідника <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
+#~ "<manvolnum>5</manvolnum> </citerefentry>."
+
+#~ msgid ""
+#~ "The InfoPipe responder provides a public D-Bus interface accessible over "
+#~ "the system bus. The interface allows the user to query information about "
+#~ "remote users and groups over the system bus."
+#~ msgstr ""
+#~ "Відповідач InfoPipe забезпечує роботу відкритого інтерфейсу D-Bus над "
+#~ "системним каналом повідомлень. За допомогою цього інтерфейсу користувачі "
+#~ "можуть надсилати загальносистемним каналом повідомлень запити щодо "
+#~ "інформації про віддалених користувачів і групи."
+
+#~ msgid "These options can be used to configure the InfoPipe responder."
+#~ msgstr ""
+#~ "Цими параметрами можна скористатися для налаштовування відповідача "
+#~ "InfoPipe."
+
+#~ msgid ""
+#~ "Specifies the comma-separated list of UID values or user names that are "
+#~ "allowed to access the InfoPipe responder. User names are resolved to UIDs "
+#~ "at startup."
+#~ msgstr ""
+#~ "Визначає список значень UID або імен користувачів, відокремлених комами. "
+#~ "Користувачам з цього списку буде дозволено доступ до відповідача "
+#~ "InfoPipe. UID за іменами користувачів визначатимуться під час запуску."
+
+#~ msgid ""
+#~ "Default: 0 (only the root user is allowed to access the InfoPipe "
+#~ "responder)"
+#~ msgstr ""
+#~ "Типове значення: 0 (доступ до відповідача InfoPipe має лише "
+#~ "адміністративний користувач (root))"
+
+#~ msgid ""
+#~ "Please note that although the UID 0 is used as the default it will be "
+#~ "overwritten with this option. If you still want to allow the root user to "
+#~ "access the InfoPipe responder, which would be the typical case, you have "
+#~ "to add 0 to the list of allowed UIDs as well."
+#~ msgstr ""
+#~ "Будь ласка, зауважте, що хоча типово використовується UID 0, значення UID "
+#~ "буде перевизначено на основі цього параметра. Якщо ви хочете надати "
+#~ "адміністративному користувачеві (root) доступ до відповідача InfoPipe, що "
+#~ "може бути типовим варіантом, вам слід додати до списку UID з правами "
+#~ "доступу запис 0."
+
+#~ msgid "user_attributes (string)"
+#~ msgstr "user_attributes (рядок)"
+
+#~ msgid ""
+#~ "Specifies the comma-separated list of white or blacklisted attributes."
+#~ msgstr ""
+#~ "Визначає список атрибутів з «білого» або «чорного» списків, відокремлених "
+#~ "комами."
+
+#~ msgid "name"
+#~ msgstr "name"
+
+#~ msgid "user's login name"
+#~ msgstr "реєстраційне ім’я користувача"
+
+#~ msgid "uidNumber"
+#~ msgstr "uidNumber"
+
+#~ msgid "user ID"
+#~ msgstr "ідентифікатор користувача"
+
+#~ msgid "gidNumber"
+#~ msgstr "gidNumber"
+
+#~ msgid "primary group ID"
+#~ msgstr "ідентифікатор основної групи"
+
+#~ msgid "gecos"
+#~ msgstr "gecos"
+
+#~ msgid "user information, typically full name"
+#~ msgstr "дані щодо користувача, типово ім’я повністю"
+
+#~ msgid "homeDirectory"
+#~ msgstr "homeDirectory"
+
+#~ msgid "loginShell"
+#~ msgstr "loginShell"
+
+#~ msgid "user shell"
+#~ msgstr "командна оболонка користувача"
+
+#~ msgid ""
+#~ "By default, the InfoPipe responder only allows the default set of POSIX "
+#~ "attributes to be requested. This set is the same as returned by "
+#~ "<citerefentry> <refentrytitle>getpwnam</refentrytitle> <manvolnum>3</"
+#~ "manvolnum> </citerefentry> and includes: <placeholder type=\"variablelist"
+#~ "\" id=\"0\"/>"
+#~ msgstr ""
+#~ "Типово, відповідач InfoPipe надає дані лише щодо типового набору "
+#~ "атрибутів POSIX. Цей набір є тим самим, який повертає програма "
+#~ "<citerefentry> <refentrytitle>getpwnam</refentrytitle> <manvolnum>3</"
+#~ "manvolnum> </citerefentry>, його елементи: <placeholder type="
+#~ "\"variablelist\" id=\"0\"/>"
+
+#~ msgid ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+#~ msgstr ""
+#~ "user_attributes = +telephoneNumber, -loginShell\n"
+#~ " "
+
+#~ msgid ""
+#~ "It is possible to add another attribute to this set by using <quote>"
+#~ "+attr_name</quote> or explicitly remove an attribute using <quote>-"
+#~ "attr_name</quote>. For example, to allow <quote>telephoneNumber</quote> "
+#~ "but deny <quote>loginShell</quote>, you would use the following "
+#~ "configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
+#~ msgstr ""
+#~ "Ви можете додати інший атрибут до цього набору за допомогою параметра "
+#~ "«+назва_атрибута» або явним чином виключити атрибут за допомогою "
+#~ "параметра «-назва_атрибута». Наприклад, щоб дозволити «telephoneNumber», "
+#~ "але заборонити «loginShell», вам слід скористатися такими налаштуваннями: "
+#~ "<placeholder type=\"programlisting\" id=\"0\"/>"
+
+#~ msgid ""
+#~ "Default: not set. Only the default set of POSIX attributes is allowed."
+#~ msgstr ""
+#~ "Типове значення: не встановлено. Дозволено лише типовий набір атрибутів "
+#~ "POSIX."
+
#~ msgid "EXIT STATUS"
#~ msgstr "СТАН ВИХОДУ"
@@ -10930,8 +11964,209 @@ msgstr ""
#~ "програма повертає 1."
#~ msgid ""
+#~ "Please note that changing the ID mapping related configuration options "
+#~ "will cause user and group IDs to change. At the moment, SSSD does not "
+#~ "support changing IDs, so the SSSD database must be removed. Because "
+#~ "cached passwords are also stored in the database, removing the database "
+#~ "should only be performed while the authentication servers are reachable, "
+#~ "otherwise users might get locked out. In order to cache the password, an "
+#~ "authentication must be performed. It is not sufficient to use "
+#~ "<citerefentry> <refentrytitle>sss_cache</refentrytitle> <manvolnum>8</"
+#~ "manvolnum> </citerefentry> to remove the database, rather the process "
+#~ "consists of:"
+#~ msgstr ""
+#~ "Будь ласка, зауважте, що зміна параметрів налаштувань, пов’язаних із "
+#~ "встановленням відповідності ідентифікаторів, призведе до зміни "
+#~ "ідентифікаторів користувачів і груп. У поточній версії SSSD зміни "
+#~ "ідентифікаторів не передбачено, отже, вам доведеться вилучити базу даних "
+#~ "SSSD. Оскільки кешовані паролі також зберігаються у базі даних, вилучення "
+#~ "бази даних слід виконувати, лише якщо сервери розпізнавання є доступними, "
+#~ "інакше користувачі не зможуть отримати потрібного їм доступу. З метою "
+#~ "кешування паролів слід виконати сеанс розпізнавання. Для вилучення бази "
+#~ "даних недостатньо використання команди <citerefentry> "
+#~ "<refentrytitle>sss_cache</refentrytitle> <manvolnum>8</manvolnum> </"
+#~ "citerefentry>, процедура має складатися з декількох кроків:"
+
+#~ msgid "Making sure the remote servers are reachable"
+#~ msgstr "Переконуємося, що віддалені сервери є доступними."
+
+#~ msgid "Stopping the SSSD service"
+#~ msgstr "Зупиняємо роботу служби SSSD"
+
+#~ msgid "Removing the database"
+#~ msgstr "Вилучаємо базу даних"
+
+#~ msgid "Starting the SSSD service"
+#~ msgstr "Запускаємо службу SSSD"
+
+#~ msgid ""
+#~ "Moreover, as the change of IDs might necessitate the adjustment of other "
+#~ "system properties such as file and directory ownership, it's advisable to "
+#~ "plan ahead and test the ID mapping configuration thoroughly."
+#~ msgstr ""
+#~ "Крім того, оскільки зміна ідентифікаторів може потребувати коригування "
+#~ "інших властивостей системи, зокрема прав власності на файли і каталоги, "
+#~ "варто спланувати усе наперед і ретельно перевірити налаштування "
+#~ "встановлення відповідності ідентифікаторів."
+
+#~ msgid ""
+#~ "NOTE: The value of this option must be at least as large as the highest "
+#~ "user RID planned for use on the Active Directory server. User lookups and "
+#~ "login will fail for any user whose RID is greater than this value."
+#~ msgstr ""
+#~ "ЗАУВАЖЕННЯ: значення цього параметра має бути не меншим за значення "
+#~ "максимального запланованого до використання RID на сервері Active "
+#~ "Directory. Пошук даних та вхід для будь-яких користувачів з RID, що "
+#~ "перевищує це значення, буде неможливим."
+
+#~ msgid ""
+#~ "For example, if your most recently-added Active Directory user has "
+#~ "objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, "
+#~ "<quote>ldap_idmap_range_size</quote> must be at least 1107."
+#~ msgstr ""
+#~ "Приклад: якщо найсвіжішим доданим користувачем Active Directory є "
+#~ "користувач з objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, "
+#~ "«ldap_idmap_range_size» повинне мати значення, яке є не меншим за 1107."
+
+#~ msgid ""
+#~ "It is important to plan ahead for future expansion, as changing this "
+#~ "value will result in changing all of the ID mappings on the system, "
+#~ "leading to users with different local IDs than they previously had."
+#~ msgstr ""
+#~ "Для майбутнього можливого розширення важливо все спланувати наперед, "
+#~ "оскільки зміна цього значення призведе до зміни усіх прив’язок "
+#~ "ідентифікаторів у системі, отже зміни попередніх локальних "
+#~ "ідентифікаторів користувачів."
+
+#~ msgid "Well-Known SIDs"
+#~ msgstr "Добре відомі SID"
+
+#~ msgid ""
+#~ "SSSD supports to look up the names of Well-Known SIDs, i.e. SIDs with a "
+#~ "special hardcoded meaning. Since the generic users and groups related to "
+#~ "those Well-Known SIDs have no equivalent in a Linux/UNIX environment no "
+#~ "POSIX IDs are available for those objects."
+#~ msgstr ""
+#~ "У SSSD передбачено підтримку пошуку назв за добре відомими (Well-Known) "
+#~ "SID, тобто SID із особливим запрограмованим призначенням. Оскільки типові "
+#~ "користувачі і групи, пов’язані із цими добре відомими SID не мають "
+#~ "еквівалентів у середовищі Linux/UNIX, ідентифікаторів POSIX для цих "
+#~ "об’єктів немає."
+
+#~ msgid ""
+#~ "The SID name space is organized in authorities which can be seen as "
+#~ "different domains. The authorities for the Well-Known SIDs are"
+#~ msgstr ""
+#~ "Простір назв SID упорядковано службами сертифікації, які виглядають як "
+#~ "інші домени. Службами сертифікації для добре відомих (Well-Known) SID є"
+
+#~ msgid "Null Authority"
+#~ msgstr "Фіктивна служба сертифікації (Null Authority)"
+
+#~ msgid "World Authority"
+#~ msgstr "Загальна служба сертифікації (World Authority)"
+
+#~ msgid "Local Authority"
+#~ msgstr "Локальна служба сертифікації (Local Authority)"
+
+#~ msgid "Creator Authority"
+#~ msgstr "Авторська служба сертифікації (Creator Authority)"
+
+#~ msgid "NT Authority"
+#~ msgstr "Служба сертифікації NT (NT Authority)"
+
+#~ msgid "Built-in"
+#~ msgstr "Вбудована (Built-in)"
+
+#~ msgid ""
+#~ "The capitalized version of these names are used as domain names when "
+#~ "returning the fully qualified name of a Well-Known SID."
+#~ msgstr ""
+#~ "Написані літерами верхнього регістру ці назви буде використано як назви "
+#~ "доменів для повернення повних назв добре відомих (Well-Known) SID."
+
+#~ msgid ""
+#~ "Since some utilities allow to modify SID based access control information "
+#~ "with the help of a name instead of using the SID directly SSSD supports "
+#~ "to look up the SID by the name as well. To avoid collisions only the "
+#~ "fully qualified names can be used to look up Well-Known SIDs. As a result "
+#~ "the domain names <quote>NULL AUTHORITY</quote>, <quote>WORLD AUTHORITY</"
+#~ "quote>, <quote> LOCAL AUTHORITY</quote>, <quote>CREATOR AUTHORITY</"
+#~ "quote>, <quote>NT AUTHORITY</quote> and <quote>BUILTIN</quote> should not "
+#~ "be used as domain names in <filename>sssd.conf</filename>."
+#~ msgstr ""
+#~ "Оскільки деякі з програм надають змогу змінювати дані щодо керування "
+#~ "доступом на основі SID за допомогою назви, а не безпосереднього "
+#~ "використання, у SSSD передбачено підтримку пошуку SID за назвою. Щоб "
+#~ "уникнути конфліктів, для пошуку добре відомих (Well-Known) SID "
+#~ "приймаються лише повні назви. Отже, не можна використовувати як назви "
+#~ "доменів у <filename>sssd.conf</filename> такі назви: «NULL AUTHORITY», "
+#~ "«WORLD AUTHORITY», «LOCAL AUTHORITY», «CREATOR AUTHORITY», «NT AUTHORITY» "
+#~ "та «BUILTIN»."
+
+#~ msgid ""
+#~ "SSSD supports two representations for specifying the debug level. The "
+#~ "simplest is to specify a decimal value from 0-9, which represents "
+#~ "enabling that level and all lower-level debug messages. The more "
+#~ "comprehensive option is to specify a hexadecimal bitmask to enable or "
+#~ "disable specific levels (such as if you wish to suppress a level)."
+#~ msgstr ""
+#~ "У SSSD передбачено два представлення для визначення рівня діагностики. "
+#~ "Найпростішим є визначення десяткового значення у діапазоні 0-9. Кожному "
+#~ "значенню відповідає вмикання відповідного рівня діагностики і усіх нижчих "
+#~ "рівнів. Точніше визначення вмикання або вимикання (якщо це потрібно) "
+#~ "специфічних рівнів можна встановити за допомогою шістнадцяткової бітової "
+#~ "маски."
+
+#~ msgid "<emphasis>Default</emphasis>: 0"
+#~ msgstr "<emphasis>Типове значення</emphasis>: 0"
+
+#~ msgid ""
+#~ "The scope can be one of \"base\", \"onelevel\" or \"subtree\". The scope "
+#~ "functions as specified in section 4.5.1.2 of http://tools.ietf.org/html/"
+#~ "rfc4511"
+#~ msgstr ""
+#~ "Діапазоном може бути одне зі значень, «base» (основа), "
+#~ "«onelevel» (окремий рівень) або «subtree» (піддерево). Докладніший опис "
+#~ "діапазонів наведено у розділі 4.5.1.2 документа http://tools.ietf.org/"
+#~ "html/rfc4511"
+
+#~ msgid "%H"
+#~ msgstr "%H"
+
+#~ msgid ""
+#~ "The value of configure option <emphasis>homedir_substring</emphasis>."
+#~ msgstr ""
+#~ "Значення параметра налаштовування <emphasis>homedir_substring</emphasis>."
+
+#~ msgid ""
#~ "override_homedir = /home/%u\n"
#~ " "
#~ msgstr ""
#~ "override_homedir = /home/%u\n"
#~ " "
+
+#~ msgid "homedir_substring (string)"
+#~ msgstr "homedir_substring (рядок)"
+
+#~ msgid ""
+#~ "The value of this option will be used in the expansion of the "
+#~ "<emphasis>override_homedir</emphasis> option if the template contains the "
+#~ "format string <emphasis>%H</emphasis>. An LDAP directory entry can "
+#~ "directly contain this template so that this option can be used to expand "
+#~ "the home directory path for each client machine (or operating system). It "
+#~ "can be set per-domain or globally in the [nss] section. A value specified "
+#~ "in a domain section will override one set in the [nss] section."
+#~ msgstr ""
+#~ "Значення цього параметра буде використано під час розгортання параметра "
+#~ "<emphasis>override_homedir</emphasis>, якщо у шаблоні міститься рядок "
+#~ "форматування <emphasis>%H</emphasis>. Запис каталогу LDAP може "
+#~ "безпосередньо містити цей шаблон для розгортання шляху до домашнього "
+#~ "каталогу на кожному з клієнтських комп’ютерів (або у кожній з операційних "
+#~ "систем). Значення параметра можна вказати окремо для кожного з доменів "
+#~ "або на загальному рівні у розділі [nss]. Значення, вказане у розділі "
+#~ "домену, має вищий пріоритет за значення, встановлене за допомогою розділу "
+#~ "[nss]."
+
+#~ msgid "Default: /home"
+#~ msgstr "Типове значення: /home"
diff --git a/src/man/po/zh_CN.po b/src/man/po/zh_CN.po
index 90aa21fa6..61cd1ef30 100644
--- a/src/man/po/zh_CN.po
+++ b/src/man/po/zh_CN.po
@@ -8,10 +8,10 @@ msgid ""
msgstr ""
"Project-Id-Version: SSSD\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2013-11-06 19:26+0100\n"
-"PO-Revision-Date: 2013-07-24 12:28+0000\n"
+"POT-Creation-Date: 2014-12-05 13:09+0100\n"
+"PO-Revision-Date: 2014-06-04 18:04+0000\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
-"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/sssd/"
"language/zh_CN/)\n"
"Language: zh_CN\n"
"MIME-Version: 1.0\n"
@@ -1099,8 +1099,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:783
+#, fuzzy
+#| msgid "These options can be used to configure any service."
msgid "These options can be used to configure the sudo service."
-msgstr ""
+msgstr "这些选项可被用于配置任何服务。"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:787
@@ -5575,8 +5577,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:384 sssd-ipa.5.xml:479
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: memberUser"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:389
@@ -5592,8 +5596,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:396 sssd-ipa.5.xml:491
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: memberHost"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:401
@@ -5639,8 +5645,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:432 sssd-ipa.5.xml:455
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: ipaHost"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:437
@@ -5654,8 +5662,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:443
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: fqdn"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:449
@@ -5709,8 +5719,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:504
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: seeAlso"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:509
@@ -5786,8 +5798,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:564
+#, fuzzy
+#| msgid "Default: 3"
msgid "Default: ipaUniqueID"
-msgstr ""
+msgstr "默认: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569